General
-
Target
3915bba46e15168e65e8a65e778253aab2d996069bf4409643258683c27a1ae4.exe
-
Size
707KB
-
MD5
1af982cc2e96068c71c5c1d45a81de1a
-
SHA1
9a32c61aa6896df98c045e86926f16190430079c
-
SHA256
3915bba46e15168e65e8a65e778253aab2d996069bf4409643258683c27a1ae4
-
SHA512
48c3ed9c2466524d6ba428bbaf122a47fc707483845c4f6d01b5bf8158f0f17ebc2803bad4806900c0da27575b5c8d77ab2a8b8c03f79484ae3e91cd0fe8766c
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1c88vnh:6uaTmkZJ+naie5OTamgEoKxLW3ih
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3915bba46e15168e65e8a65e778253aab2d996069bf4409643258683c27a1ae4.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections