General
-
Target
37009e779a6e55c1fc0d091a60983972e3e610e4b626e0934c965e604f2d0f53.exe
-
Size
707KB
-
MD5
7308ea46bded7858d73aacd50c11e8e1
-
SHA1
64d9b2b2cabff6cdfa15c890e048f9984617ee9e
-
SHA256
37009e779a6e55c1fc0d091a60983972e3e610e4b626e0934c965e604f2d0f53
-
SHA512
85f7b7108d72abd5df5da5f5c94161520f8f4edb96cc4ac93d544545e2986d02d5fcfd01cfdc202f16477a1d0adcd32d65db84b11309e020b754c7ae48d51df0
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza19888vnh:6uaTmkZJ+naie5OTamgEoKxLWg8ih
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
37009e779a6e55c1fc0d091a60983972e3e610e4b626e0934c965e604f2d0f53.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections