General
-
Target
3fad1a69cc4ca0cb2637d4322cfe514a4d6161c8d646455484c650908ade0bd9.exe
-
Size
707KB
-
MD5
fb716940c44862ebfd15c624ede1fb75
-
SHA1
e25908d815e50cda54c9e9bd33f30180526657a9
-
SHA256
3fad1a69cc4ca0cb2637d4322cfe514a4d6161c8d646455484c650908ade0bd9
-
SHA512
343c1910bc5d6ef34128cabc184592b22669f65f9490defe3c1098b68c83baf2877f82f668464caaff5ffcbc0de9f4d2c2895d1f292b9f2817f13467741644e4
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1s88vnh:6uaTmkZJ+naie5OTamgEoKxLW/ih
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3fad1a69cc4ca0cb2637d4322cfe514a4d6161c8d646455484c650908ade0bd9.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections