General
-
Target
3c0d71e5807161d4f012936fd6687af940c96d2059a4c64cc238b0a7729c8678.exe
-
Size
707KB
-
MD5
63296136b470ff8054babbcdef2db398
-
SHA1
7a99a76fc9d0ff21140e2d4928a62eb03609366d
-
SHA256
3c0d71e5807161d4f012936fd6687af940c96d2059a4c64cc238b0a7729c8678
-
SHA512
8da2514c6a08171abca490e9536ac1351e7b7228d20b77642f3d8780abde5bd70435ee98df1e95806307a08a489cf872fa0a1d406676d5fb6b2c910acd422043
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1985vnh:6uaTmkZJ+naie5OTamgEoKxLW49h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3c0d71e5807161d4f012936fd6687af940c96d2059a4c64cc238b0a7729c8678.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections