General
-
Target
36ad754fd43d4a4b91bdddc0c350b7c5eaf5490f0b464d0282b6b74e4d6e8696.exe
-
Size
707KB
-
MD5
68febb2a43f433becf6030d3fab69884
-
SHA1
a1d3a2e4bc5547bdbe535e22866f4cf633e71f75
-
SHA256
36ad754fd43d4a4b91bdddc0c350b7c5eaf5490f0b464d0282b6b74e4d6e8696
-
SHA512
45f1606758299903bd7e15129f99274a6186bf9c911b5089abe2a7ee408b02459f7f1dd1f0057cfc123750c3bb964f2e5cb6b47a77c939ffac5f6b622711cb99
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1x8kvnh:6uaTmkZJ+naie5OTamgEoKxLWkah
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
36ad754fd43d4a4b91bdddc0c350b7c5eaf5490f0b464d0282b6b74e4d6e8696.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections