General
-
Target
36379060ac7ac91be901ea5dea1e13640d1b6a5720baf4f1ea0d8fd3041458e4.exe
-
Size
707KB
-
MD5
1161a3593c07cbf0a5def9c504a7f4db
-
SHA1
1feef658897de75aad7470c85ef20457bad087a5
-
SHA256
36379060ac7ac91be901ea5dea1e13640d1b6a5720baf4f1ea0d8fd3041458e4
-
SHA512
0812abec6709a8925a8ceedb29eeecb4f2ce37cb1c646cee5d46b221a465849313cb5c9d793b044998599ec4b9c32326eaf8a0b2e21261e672d77db03915fdec
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1t8hvnh:6uaTmkZJ+naie5OTamgEoKxLWo1h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
36379060ac7ac91be901ea5dea1e13640d1b6a5720baf4f1ea0d8fd3041458e4.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections