General
-
Target
3a7cf86b7846b8f360dba36658395cd3dc0c88c6d0b4e2ab5720831246fbec77.exe
-
Size
707KB
-
MD5
55a09c80e82abe5f0ad230d7c1f55c91
-
SHA1
e29041e63344aa8a9283fb476e0ac3484493a31d
-
SHA256
3a7cf86b7846b8f360dba36658395cd3dc0c88c6d0b4e2ab5720831246fbec77
-
SHA512
29d0d361dc1c6b4b0a21054cdc68a31d6e0b83f888bb8020aff6d19134eda379c6ba074bf3c09ef3a50df0aa7da5a6510cc0b1af430594c2e60293dabcbe1f7f
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1e8zvnh:6uaTmkZJ+naie5OTamgEoKxLW1zh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3a7cf86b7846b8f360dba36658395cd3dc0c88c6d0b4e2ab5720831246fbec77.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections