General
-
Target
c36330fc863f280133780184096a3a57c369695b28a0876e056d42a0afff3a45.exe
-
Size
707KB
-
MD5
b81f062889010a14f5cebb98268e185b
-
SHA1
859545188bfc852cbd88aa6c478a33b5e7f3a017
-
SHA256
c36330fc863f280133780184096a3a57c369695b28a0876e056d42a0afff3a45
-
SHA512
d4fae6b66d516b5362adfda80b254348991152625f3d9c7869607808b605e7d27bb74fa85c3cc373201c8118f5a0003e0d27e18366c751aea53dd39dd07b0ec6
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1r8evnh:6uaTmkZJ+naie5OTamgEoKxLWaAh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
c36330fc863f280133780184096a3a57c369695b28a0876e056d42a0afff3a45.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections