General
-
Target
3b6567e8417e49ea2cb1db5af7b40bfa2bc88ba6b279bb5141bc6ad2a40bc118.exe
-
Size
707KB
-
MD5
433e510ece89e452750293b4d80720e4
-
SHA1
114184ed481b421dab39142a6560e36d375a9f1d
-
SHA256
3b6567e8417e49ea2cb1db5af7b40bfa2bc88ba6b279bb5141bc6ad2a40bc118
-
SHA512
016c2a0eee76c45afd6c0ae66c1ebe79d67106a75c2ef589091813165a28085fb1f303b26d7d2bc4c78d30752ede7f61af95ebc5f6c075e23bcf5653d2e23a6b
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1N8Avnh:6uaTmkZJ+naie5OTamgEoKxLWweh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3b6567e8417e49ea2cb1db5af7b40bfa2bc88ba6b279bb5141bc6ad2a40bc118.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections