Overview

overview

10

Static

static

10

32370b6b59...db.exe

windows7-x64

10

32370b6b59...db.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    32370b6b592428fe5a10f400cb7a11748728975ea3a920110782f727d378acdb.exe

  • Size

    707KB

  • MD5

    c14e291acdec0e41ca6f684ac5e2321c

  • SHA1

    55e44fb8a915a49592390892c1d8c44024e8ce7b

  • SHA256

    32370b6b592428fe5a10f400cb7a11748728975ea3a920110782f727d378acdb

  • SHA512

    7f04f1e623b372b64f91a3ebb6fb280c52d27fef47ff207045e927d02818c10257ceca0799bf8ba362b6850dae6206313f01b786bd9479bf8e0653e776e4bf8e

  • SSDEEP

    6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1z8nvnh:6uaTmkZJ+naie5OTamgEoKxLWyvh

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
  • Detects executables containing commands for clearing Windows Event Logs 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 32370b6b592428fe5a10f400cb7a11748728975ea3a920110782f727d378acdb.exe
    .exe windows:5 windows x86 arch:x86

    2f7da257a3159bdb9faeb823ef872a56


    Headers

    Imports

    Sections