General
-
Target
325138425c41cef12993f4a4047ddf94c8e5d6dcbb18456baa32f55eb4fad3b3.exe
-
Size
707KB
-
MD5
f4c91fc96edc0d4481afd06d1c4099cc
-
SHA1
12735e2d8a46257aa9294589002bb2b4168c9327
-
SHA256
325138425c41cef12993f4a4047ddf94c8e5d6dcbb18456baa32f55eb4fad3b3
-
SHA512
2517c1e3036d9ad908dfecf8c3d9b35a53f1bcb294758d4b607ab298a6d84545ff5117eb47e2aea0442bc089e9f8dd1595939928a549f978597700ec5fb0dc25
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1B8Pvnh:6uaTmkZJ+naie5OTamgEoKxLWcHh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
325138425c41cef12993f4a4047ddf94c8e5d6dcbb18456baa32f55eb4fad3b3.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections