General
-
Target
3be0b4a1612757aff77c5f47d5c7ca0582e4edc987f6775cf56bcb4dcdfa7673.exe
-
Size
707KB
-
MD5
825fb6ba33bb8ec12eb5cef0115bd768
-
SHA1
226c39ceb596e08e0683a35001013b5433f45421
-
SHA256
3be0b4a1612757aff77c5f47d5c7ca0582e4edc987f6775cf56bcb4dcdfa7673
-
SHA512
6af46733baa45d43eb4a966012344ef5ac916fe9b5339d04346e97c1a065f56f385f3275edeb122197cf74a6fa9ea3b4e287077a1b5035fd68313f82bec51974
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1g8vvnh:6uaTmkZJ+naie5OTamgEoKxLWDnh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3be0b4a1612757aff77c5f47d5c7ca0582e4edc987f6775cf56bcb4dcdfa7673.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections