General
-
Target
03ae0a3fc3c4a5000672ef7d8e8262c7325bcce47594a94c9d14207d2dd7dab2.exe
-
Size
707KB
-
MD5
196f0393245e1b775a13f33c79f294a4
-
SHA1
6aafba782df9d3a4a7c055ea826c1b6b37f97587
-
SHA256
03ae0a3fc3c4a5000672ef7d8e8262c7325bcce47594a94c9d14207d2dd7dab2
-
SHA512
cf0557593b953ea2a2bd6b259384f5a6441e9fa8f1ad3b3ac9dfdfabdb19f4494c58bd4790b79761d2202b33918a488557076cd1e95458e0e18ecf6c5840563d
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1v8Tvnh:6uaTmkZJ+naie5OTamgEoKxLWmTh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
03ae0a3fc3c4a5000672ef7d8e8262c7325bcce47594a94c9d14207d2dd7dab2.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections