General
-
Target
b1b3b738c28a4dd24583fcf71764383e946bb4d77ee49578dea4a14bc68e8737.exe
-
Size
707KB
-
MD5
31f99e438db87592e2948075cb502d01
-
SHA1
8a10bd7779605580c2758e0dfddec6a5e20963a3
-
SHA256
b1b3b738c28a4dd24583fcf71764383e946bb4d77ee49578dea4a14bc68e8737
-
SHA512
5762bb12cff0c564bd6fb0f1df16cc8d814ba5d1bb7d4701c5fad834a4234e813957da490204469fdcd86706220dd24f4ff124108c6efd75071a04b778993c7c
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1w89vnh:6uaTmkZJ+naie5OTamgEoKxLWTJh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
b1b3b738c28a4dd24583fcf71764383e946bb4d77ee49578dea4a14bc68e8737.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections