General
-
Target
3b0926b47f23066b0acdac18993d5e4ee787e88df2c46b88deff1bfe3a078e8d.exe
-
Size
707KB
-
MD5
5a02e259e3a63d3d93737e75c38a9c4a
-
SHA1
9d7a3afc25d15d71d3df5769b6625e263f02c642
-
SHA256
3b0926b47f23066b0acdac18993d5e4ee787e88df2c46b88deff1bfe3a078e8d
-
SHA512
a87fa7e4fd060c34862fd658581c6aba970468b7a96e6c85c0bf20466617ecdfa7a114fbe4a34c97bfb54fb9a03730c9d5e4a03428e15bcb70ffb2ef3baf1f0a
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1m8Nvnh:6uaTmkZJ+naie5OTamgEoKxLW15h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3b0926b47f23066b0acdac18993d5e4ee787e88df2c46b88deff1bfe3a078e8d.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections