General
-
Target
3731d383c7d4ea0fe80e5f0f8bec944769a9c564dd3cc626479e93a2fbec9b03.exe
-
Size
707KB
-
MD5
114fdca525455167086b8b08e1a15950
-
SHA1
2c27ec689c30b3da6c730e8d3aa19e1181f8a530
-
SHA256
3731d383c7d4ea0fe80e5f0f8bec944769a9c564dd3cc626479e93a2fbec9b03
-
SHA512
aabb9df51c8b12b0900beb7336cb2850dd71196c941fc3a8979f2c7875432d70ca05b58b016968b49114e8d82e906a69b74feb83700a0f659f791ffde81f3be9
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1f8evnh:6uaTmkZJ+naie5OTamgEoKxLWuAh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3731d383c7d4ea0fe80e5f0f8bec944769a9c564dd3cc626479e93a2fbec9b03.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections