General
-
Target
3af50d22b02d336014d01e21fed030eba40a1df95a1b591e24356b17cfcd0775.exe
-
Size
707KB
-
MD5
1b58ee80bd41eb01ae336a9cd79d2565
-
SHA1
aa075976e14426ed37be9eb27119e0889246b864
-
SHA256
3af50d22b02d336014d01e21fed030eba40a1df95a1b591e24356b17cfcd0775
-
SHA512
d8cdef82b2de85cf2f737e645ca013c0ccb631ff69ceb561666f60abc95b02faf8c30407a17e15afb61e5572aba1b2eecb0c077c032e6b4a2219fdb00a3dc6a9
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza188qvnh:6uaTmkZJ+naie5OTamgEoKxLWvkh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3af50d22b02d336014d01e21fed030eba40a1df95a1b591e24356b17cfcd0775.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections