General
-
Target
925dd535745c823f280b29af489642a1fe0fccd52f7c2e2dbe22667e3cab0420.exe
-
Size
707KB
-
MD5
37a34dd4da3130d1a5d3477d7db2c2fd
-
SHA1
3d37053cfb34cb8272f47a87d681a7ae67295f7c
-
SHA256
925dd535745c823f280b29af489642a1fe0fccd52f7c2e2dbe22667e3cab0420
-
SHA512
6576e718423df6fabc79b23fa2c9c67ae27f8fa5febef0c969ab88ade40a593416ee27172c9b5b72352d5941800eb1954b48a6309a69d894fb5e51e264dd39ea
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza198svnh:6uaTmkZJ+naie5OTamgEoKxLWQyh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
925dd535745c823f280b29af489642a1fe0fccd52f7c2e2dbe22667e3cab0420.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections