General
-
Target
3e0374c223ae1df87b43e0e3930a440b0944ab04fee829ffc7fd7004e8a90e52.exe
-
Size
707KB
-
MD5
ef59321238ec99561fa3f2b9ea6bc1aa
-
SHA1
bd472c848ac5ef03d838fea93b3d11cd83c06a47
-
SHA256
3e0374c223ae1df87b43e0e3930a440b0944ab04fee829ffc7fd7004e8a90e52
-
SHA512
2ff8fc4d297b31838d9b153aa27ba614bca2e79f8873992a576f5a6b503ca92c1f843b455368caf95a3cfd614e7bef2ca8cb5d04580ef34db1597a01b719ab41
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1z8cvnh:6uaTmkZJ+naie5OTamgEoKxLWKCh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3e0374c223ae1df87b43e0e3930a440b0944ab04fee829ffc7fd7004e8a90e52.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections