General
-
Target
3312d6f727896afb969037da374402c5a04d02505cb87ce1d677d48cf24c30ff.exe
-
Size
707KB
-
MD5
9f7d1d15e3511a7f20f3f243a06ade4c
-
SHA1
5ca6c36c01f19b8d587a0964ad56691533244cdb
-
SHA256
3312d6f727896afb969037da374402c5a04d02505cb87ce1d677d48cf24c30ff
-
SHA512
f74916b805aeea31eedfeec91f76170218be69b1ca0382bd3898a3fd99a07334adc58835add5a4ec6f2649e78ca88fd8fcf76377da078752871ef8abd393ebf6
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1M80vnh:6uaTmkZJ+naie5OTamgEoKxLWfKh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3312d6f727896afb969037da374402c5a04d02505cb87ce1d677d48cf24c30ff.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections