General
-
Target
36366a77c22f4c655b98f94ecfdb65ff4264ea7c5432e25243eff902f7090ffe.exe
-
Size
707KB
-
MD5
1fef0c1825acb01b6fd63f3bfb3cb39e
-
SHA1
e1d8aebae4441fb425a96f317770a661fcc9a3b7
-
SHA256
36366a77c22f4c655b98f94ecfdb65ff4264ea7c5432e25243eff902f7090ffe
-
SHA512
248fb61a997d59d2fce1384d37086e40789510ba3c3d4f71630aaf0f366126fb5906b2e5bf7c15d181d0669814e26dc714eaa851e3e6092fb06a45a91f958eeb
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1281vnh:6uaTmkZJ+naie5OTamgEoKxLWlxh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
36366a77c22f4c655b98f94ecfdb65ff4264ea7c5432e25243eff902f7090ffe.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections