General
-
Target
37152d5b97e12075a7c6e42d0b735af6fffc0a3bb1c6fb688dcdce0406c18f0d.exe
-
Size
707KB
-
MD5
783addc5d6ad87ebf3e39ad53db37b54
-
SHA1
7733811970e0c323709ab38c064e7240ed1bfdd6
-
SHA256
37152d5b97e12075a7c6e42d0b735af6fffc0a3bb1c6fb688dcdce0406c18f0d
-
SHA512
2feb5a7c57db0e892cfbcad3a12cd6a6ed6f2364ef127c06bf2ceb09d70d102c05ea82e5d0e2f00a37158e4f36593d3ab40767c294fc9cdb04375e41441a4138
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1N8xvnh:6uaTmkZJ+naie5OTamgEoKxLWglh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
37152d5b97e12075a7c6e42d0b735af6fffc0a3bb1c6fb688dcdce0406c18f0d.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections