General
-
Target
936d95dc6dcfc5bcd49d3b76aa9686b435bc65f35cf716a9613d4da280383422.exe
-
Size
707KB
-
MD5
7aeb60394ee1fc86b29808e58ca3321b
-
SHA1
c09c90a0432a1dc079b2ca59987969938c952205
-
SHA256
936d95dc6dcfc5bcd49d3b76aa9686b435bc65f35cf716a9613d4da280383422
-
SHA512
b6a0234f1f6143ed093b05ef67135300f019c460ec6fa770f1edfbace1368d884241c75c3b599021d87416d96cc1bd56312c089aa808a19ded5f0740597576bb
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1J8Cvnh:6uaTmkZJ+naie5OTamgEoKxLWMMh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
936d95dc6dcfc5bcd49d3b76aa9686b435bc65f35cf716a9613d4da280383422.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections