General
-
Target
301d16f3ced05928c82acb5b2e60a33806807a1a176db4180e8ac96e271a9122.exe
-
Size
707KB
-
MD5
4dc88c105f9faf01a786209c5d9a8353
-
SHA1
0937a6054641f12d67dcc9f6f47e61a71111889d
-
SHA256
301d16f3ced05928c82acb5b2e60a33806807a1a176db4180e8ac96e271a9122
-
SHA512
2975f30ddf07b1f7f54ad9db77a05c36c662f70800431e1b219ff1f251bca98fa4bece7259195bd1f709f2b21f9a54dbd0f1b00b076367478b6ae1ddab1999b7
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1r8Vvnh:6uaTmkZJ+naie5OTamgEoKxLWCRh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
301d16f3ced05928c82acb5b2e60a33806807a1a176db4180e8ac96e271a9122.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections