General
-
Target
31e6553bb97f8927cd4182c7d221600300ab93c17c89eead10ca109cb382473f.exe
-
Size
707KB
-
MD5
058aa1aa3da765555d42e2e34bb5a8c2
-
SHA1
415d7c6b51e2fee6076dac135c3ac5c1f6c98087
-
SHA256
31e6553bb97f8927cd4182c7d221600300ab93c17c89eead10ca109cb382473f
-
SHA512
0f9eefc2f9b7decb435b54091ef8d568db34783216840af0a305eb57abe3cf3bf59377f6eb39088fea221bb993a6d4903b38dd2176b40c0ec9c7cbd5ae340ad1
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1h8evnh:6uaTmkZJ+naie5OTamgEoKxLW0Ah
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
31e6553bb97f8927cd4182c7d221600300ab93c17c89eead10ca109cb382473f.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections