General
-
Target
3f9b94e9656b5d4ce45df94e3640f2eb85f4052982e6f390b8021f2da4450aca.exe
-
Size
707KB
-
MD5
e3479037af79ac0abc0778b1b011b9ee
-
SHA1
49aaf5854764bd934dea3519e9b34e36c72fd4ca
-
SHA256
3f9b94e9656b5d4ce45df94e3640f2eb85f4052982e6f390b8021f2da4450aca
-
SHA512
0f0330aee0355c59fec9d25c727123be4eafa69e9cce41b7aa522d84fd94c4e5fe45c750baed3e5b2931ebf773c524f400b30a36e6ab8749fcd6e069fbd765b8
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1W8Gvnh:6uaTmkZJ+naie5OTamgEoKxLWt4h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3f9b94e9656b5d4ce45df94e3640f2eb85f4052982e6f390b8021f2da4450aca.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections