General
-
Target
f27e89f46d0bce544664d0265ae2a47913b4db1b880365a9f5c7c101acb329be.exe
-
Size
707KB
-
MD5
cf41e392700822d198b9e26bba354517
-
SHA1
6ef34d3dbc80cee83d2956b15bb9608ab89c4301
-
SHA256
f27e89f46d0bce544664d0265ae2a47913b4db1b880365a9f5c7c101acb329be
-
SHA512
e3cb9eff9c209ce022478a9c4abc4475a03c2ae977b553d033baa6d513adfa52c1a3db52a09397c1683b189b3f18a9e7e3d4705b02f34146263aaa92204f1f60
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1t83vnh:6uaTmkZJ+naie5OTamgEoKxLWAfh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
f27e89f46d0bce544664d0265ae2a47913b4db1b880365a9f5c7c101acb329be.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections