General
-
Target
3a6a2e538ea17126d33ab2db71c76232cd3191c751b4119140a6bdf892158e6c.exe
-
Size
707KB
-
MD5
fb91f6f8469140482bb2ca042b899fe3
-
SHA1
d221b2814a0a55ad5d5b2e7b82c81309fb1973b3
-
SHA256
3a6a2e538ea17126d33ab2db71c76232cd3191c751b4119140a6bdf892158e6c
-
SHA512
e5bffa49a784cfb642cafe874859fc5b51d169a1a4278a9f2a27f0087b3a0e16ad2195a2ce24b32ab3a915a732bc38727f2f64b8cab6ce7805d946b5adb27917
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza108Ivnh:6uaTmkZJ+naie5OTamgEoKxLWX2h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3a6a2e538ea17126d33ab2db71c76232cd3191c751b4119140a6bdf892158e6c.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections