General
-
Target
32b1a3e4ca49ba78d6b3ac763a3102afb7cf58595e6d7186b0e5abbba972ff34.exe
-
Size
707KB
-
MD5
e48dc0e8be46b0d4e5c92f5dcadd4a3f
-
SHA1
e4654354592b67cfebe72e0f567519060b4e17b2
-
SHA256
32b1a3e4ca49ba78d6b3ac763a3102afb7cf58595e6d7186b0e5abbba972ff34
-
SHA512
fc8719f893557e65943f5705de83e4f7537e861763cc9634936559f8f5bbada43c107b60bf112246a50b2c8ae68b0b8ac3a356769c85d96e01fda6960e295724
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1y84vnh:6uaTmkZJ+naie5OTamgEoKxLWpGh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
32b1a3e4ca49ba78d6b3ac763a3102afb7cf58595e6d7186b0e5abbba972ff34.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections