General
-
Target
3ed171fd62cd57cc98eea098bc1c5842ffcc4ffbf239fd09f1dd213d8a8643fc.exe
-
Size
707KB
-
MD5
409d8dc34ff8ee70586fbe0cb20e32a6
-
SHA1
9ae080f37612d082e8601d76fff1128e51b9199a
-
SHA256
3ed171fd62cd57cc98eea098bc1c5842ffcc4ffbf239fd09f1dd213d8a8643fc
-
SHA512
504fceba6956afb5965ee6069bbf8dfe7005606843368c863d0052e6ca21e2aceba1da76f6d3f2ec2a4af20780159ab673e2cf9567bde37f20dd520fcb2cd84a
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1q8bvnh:6uaTmkZJ+naie5OTamgEoKxLWRLh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3ed171fd62cd57cc98eea098bc1c5842ffcc4ffbf239fd09f1dd213d8a8643fc.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections