General
-
Target
38cc9c6c89b047596823aed704f7a743e9ca5fa9348b0eddbabd28bf6d609965.exe
-
Size
707KB
-
MD5
30917b32906d0c0bb27d4e5141864e7c
-
SHA1
e22fa87e4d1438bd188f6ce23dc0eeafabb82938
-
SHA256
38cc9c6c89b047596823aed704f7a743e9ca5fa9348b0eddbabd28bf6d609965
-
SHA512
74549f08f051e8d9f3a4923f70170e84fba5cf14a0360f45114509cacee51cda1a125bb1eb9ebaefe436ec076a005bba1d5ed84fd01e4c441bb43555ef9d92f0
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1h85vnh:6uaTmkZJ+naie5OTamgEoKxLW09h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
38cc9c6c89b047596823aed704f7a743e9ca5fa9348b0eddbabd28bf6d609965.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections