General
-
Target
3a124be3def90d6add5e8c4b8300a1749d328050b7bcdaeac2dd31fefe0e62e4.exe
-
Size
707KB
-
MD5
7e404bda1e7b32d528a597e4a1d0146d
-
SHA1
3a7521f14920b9fa792cb8d7fd77597191c39836
-
SHA256
3a124be3def90d6add5e8c4b8300a1749d328050b7bcdaeac2dd31fefe0e62e4
-
SHA512
4549fe9b53b4c482d15958a4c563fb9e8826aa1b5df5a7ee7bc6ca1daf577f9cb75f9ec178eee0a39069330e256b591979a4914b1a34668259d6ad75f772f9a3
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza118xvnh:6uaTmkZJ+naie5OTamgEoKxLWAlh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3a124be3def90d6add5e8c4b8300a1749d328050b7bcdaeac2dd31fefe0e62e4.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections