General
-
Target
3919a067e2de2e936635b2737c13622ea82462f0b737a0da42b59040e7848143.exe
-
Size
707KB
-
MD5
dddcc020f2194d69723504899fea4011
-
SHA1
7281972446b8d63e6af75d435dccb389beeff397
-
SHA256
3919a067e2de2e936635b2737c13622ea82462f0b737a0da42b59040e7848143
-
SHA512
f6e8ede5f1767a7aeb7f07381035507af95c49995407453bf1404a4a802c5a0b170e5df6ddab373baf45f1b796bcef11a7d7d46d2016c8cca8bd3ebef89a4bac
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1U8ovnh:6uaTmkZJ+naie5OTamgEoKxLWXWh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3919a067e2de2e936635b2737c13622ea82462f0b737a0da42b59040e7848143.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections