General
-
Target
35465ddd9a68d6151ba0c6becbcdc003479b4894c6bfbf6c46df711e003c8802.exe
-
Size
707KB
-
MD5
9389bdba26d1a12436e4fec7176c13de
-
SHA1
b9a39697cc70b00da98e7d2a1a85f30d1f2b3453
-
SHA256
35465ddd9a68d6151ba0c6becbcdc003479b4894c6bfbf6c46df711e003c8802
-
SHA512
45af1e240694c4d3cd6ecbf1721b8d5152aecd4361ea78ecd126ac644b90db542e5df8990f6710aa638c1f2bba82c6702d198d66266ad6deeba040b3e051d8d1
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza138uvnh:6uaTmkZJ+naie5OTamgEoKxLWGwh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
35465ddd9a68d6151ba0c6becbcdc003479b4894c6bfbf6c46df711e003c8802.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections