General
-
Target
38748e3c63b78e9cdbd350d3bc39c0d1aa31e34ec056e863b79ba390dc49869b.exe
-
Size
707KB
-
MD5
27e31e8ae040ef04dad7994515bfd95d
-
SHA1
4e47602b8b4daea21861bcd20d8fc5e84941912c
-
SHA256
38748e3c63b78e9cdbd350d3bc39c0d1aa31e34ec056e863b79ba390dc49869b
-
SHA512
1b6985320453b194a0db9a0afa0aca5899bd2a254729807bf4e637a275ca29ed0db5af95d8fd82d8c9c11b55fcfbeab112fd250562d7d45c59ca6bfbe34399c2
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1C8ovnh:6uaTmkZJ+naie5OTamgEoKxLW5Wh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
38748e3c63b78e9cdbd350d3bc39c0d1aa31e34ec056e863b79ba390dc49869b.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections