General
-
Target
36acde89aec63c5c04db7aa62d546468392863d95670866385302edc995a6cfe.exe
-
Size
707KB
-
MD5
188be50fd2eb8bd3bdd2a73ce65326cc
-
SHA1
e50bdda08f820436ebd1c0b5ba805876c7789263
-
SHA256
36acde89aec63c5c04db7aa62d546468392863d95670866385302edc995a6cfe
-
SHA512
60a15c6f8ae762929433c87adc54361516658cfb08ed853e630519b376e567b746a5e40e3342745c941493695742316e9c4e217341b592e966b4375dda59225a
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1H85vnh:6uaTmkZJ+naie5OTamgEoKxLWu9h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
36acde89aec63c5c04db7aa62d546468392863d95670866385302edc995a6cfe.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections