General
-
Target
377633d59166c9526651491fd1771a754a500bd8eba683174c6e5a49af521a0e.exe
-
Size
707KB
-
MD5
e4a490ddb20353334c5aa61bace8c008
-
SHA1
769cd5d171f2c4434bfc74059c21a0545c707a43
-
SHA256
377633d59166c9526651491fd1771a754a500bd8eba683174c6e5a49af521a0e
-
SHA512
4fad6d2239440aebe654600565073ec4c501df13496e116df3e511e821288e494a9f2e763b1441fb495d1a81edc47bd6e6aab1a6554e7f16970e39d3d0117749
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1i8Hvnh:6uaTmkZJ+naie5OTamgEoKxLWZPh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
377633d59166c9526651491fd1771a754a500bd8eba683174c6e5a49af521a0e.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections