General
-
Target
d631bffe383c8b4fc2def85203963af3fe4e60ea519ff8a72c6f63a92daecb6e.exe
-
Size
707KB
-
MD5
499bb7e67112a52d163af460a65325d8
-
SHA1
35fa7be9050e4388225abfb8f95fb874d56977c5
-
SHA256
d631bffe383c8b4fc2def85203963af3fe4e60ea519ff8a72c6f63a92daecb6e
-
SHA512
bff9288a77b89b68d4c48230b3de7c54b39561d54be4e79e346e7f8c8e91847751f9b1c97bfbba04bdfe762ca21218b0187ca3cb22c8a7b665f0135fc9047502
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1E8Bvnh:6uaTmkZJ+naie5OTamgEoKxLWPVh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
d631bffe383c8b4fc2def85203963af3fe4e60ea519ff8a72c6f63a92daecb6e.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections