General
-
Target
b63c7cf48e5a40f2d9176d4575f0d616660d25145d4b28d0b984f25b3e74d2ae.exe
-
Size
707KB
-
MD5
02cd580301e5833fddd77b8b741dd9dd
-
SHA1
28a51662b6d2e874fef80d9ea8d80a21d7772e99
-
SHA256
b63c7cf48e5a40f2d9176d4575f0d616660d25145d4b28d0b984f25b3e74d2ae
-
SHA512
b4b2e9f132962984f8358d61393cb4073a60f183922d3197254b4927c23ccf7a50cd60cd5745aa811b186c5e0d8932278d04a690534101346e4c25e8d97c6d1d
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza158+vnh:6uaTmkZJ+naie5OTamgEoKxLWcgh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
b63c7cf48e5a40f2d9176d4575f0d616660d25145d4b28d0b984f25b3e74d2ae.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections