General
-
Target
3ec9165e7ad9dab87ba5dec90348b0851811d561138e64a105f81c91b108ba50.exe
-
Size
707KB
-
MD5
0f5f30c6e85de33ca52837dfc7005032
-
SHA1
1b3541c7a9ad05ccd01b1cda3e1ac49d299484fd
-
SHA256
3ec9165e7ad9dab87ba5dec90348b0851811d561138e64a105f81c91b108ba50
-
SHA512
64805a95ef5f1623da2709019723b5cbc01c4ddc732e036636686eda84c751eea043a15b056abb38bbb4d3a408caa2c7ffe1ae6c3eb8019aab472b7c5d601733
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1D8jvnh:6uaTmkZJ+naie5OTamgEoKxLWKDh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3ec9165e7ad9dab87ba5dec90348b0851811d561138e64a105f81c91b108ba50.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections