General
-
Target
1b3d0f7a23c85c22edb03a43abd74a92c77f8384868fab6b5c913cb8775b4737.exe
-
Size
707KB
-
MD5
e8a9e50e5dde437dd11a71b4359286fa
-
SHA1
3782c755b232af0ff6f79525e486e94f591ecd81
-
SHA256
1b3d0f7a23c85c22edb03a43abd74a92c77f8384868fab6b5c913cb8775b4737
-
SHA512
6d8574dfb71fc306024557ea7af9884e9b398dfe8de5409dd7e0a8a6028ff3cc2533ef3b605a2808f644c179d2ece1647b4df93e6777d7e54ec4f11d17cc9000
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza128ovnh:6uaTmkZJ+naie5OTamgEoKxLWNWh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1b3d0f7a23c85c22edb03a43abd74a92c77f8384868fab6b5c913cb8775b4737.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections