General
-
Target
35fff0facc2aac8ed9de6e07eefe42a99f6a9f0151037619dc91c827796f00ea.exe
-
Size
707KB
-
MD5
76c2bf5a25c56bc34223a9047b760156
-
SHA1
ac1d39b637c1ba4e277c9bb62ac9c8001879370e
-
SHA256
35fff0facc2aac8ed9de6e07eefe42a99f6a9f0151037619dc91c827796f00ea
-
SHA512
9fe0b95cf706dea384b908efa3f6784fc66a30894bac5e5e51f9daa5f270e40bd303508065214c5a0b018f5ffd0a1f102200a0ae7c80c495dc091781bb317982
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza188Pvnh:6uaTmkZJ+naie5OTamgEoKxLWXHh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
35fff0facc2aac8ed9de6e07eefe42a99f6a9f0151037619dc91c827796f00ea.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections