General
-
Target
3a406345fe765ebd0003481d9ee1d2fe377ae9c3a566e00af72a9a32c04b4086.exe
-
Size
707KB
-
MD5
8fa041afb0879a3b176782ebd117e1af
-
SHA1
86887b732338e37e85cdfdd276d693ce11819182
-
SHA256
3a406345fe765ebd0003481d9ee1d2fe377ae9c3a566e00af72a9a32c04b4086
-
SHA512
e3fa550f98cf4af57027429c48242bea25ef0ceeed59552e55b92d808edafb734f540ade3d27956931a977839fcece1d16471cbbb19674451b776a19e472fa95
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza198ivnh:6uaTmkZJ+naie5OTamgEoKxLWwsh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3a406345fe765ebd0003481d9ee1d2fe377ae9c3a566e00af72a9a32c04b4086.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections