General
-
Target
3a7d25e000a70b7df27733e137eb743952f26bc165d6f1283c509fc8c106b44c.exe
-
Size
707KB
-
MD5
19de04d86b4f1bf9b1b5df576471ceb2
-
SHA1
1b9bea1c7e650e44800d6fa665c1c254c296f68f
-
SHA256
3a7d25e000a70b7df27733e137eb743952f26bc165d6f1283c509fc8c106b44c
-
SHA512
77fcff8c55c85670c5c7fa3202b1fdda3383d7aa3d194b4b38a2be7c121252ec2be59dad7c61bdcb85923581d6feb48ce5104fb64329d47c0481e036655b4e9f
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1g8Evnh:6uaTmkZJ+naie5OTamgEoKxLWT6h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3a7d25e000a70b7df27733e137eb743952f26bc165d6f1283c509fc8c106b44c.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections