General
-
Target
c1b3fcccdb47e9bb95f55168612ea0636e9eb8003c65e97db55ab8ebc554f28e.exe
-
Size
707KB
-
MD5
8cc4e82683a3a7c9abc3386de3a27ef1
-
SHA1
6eae91de20c4333b11a37c2a395cf63e142ceab4
-
SHA256
c1b3fcccdb47e9bb95f55168612ea0636e9eb8003c65e97db55ab8ebc554f28e
-
SHA512
397d3d666e0929307587c23c7f4e15f5e2d3c4a635a7a68eae34e4706ca16a25544661bf0a19d749f97052806be060b739e0fa579819fabfb6755dd4e60ba554
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1r8Hvnh:6uaTmkZJ+naie5OTamgEoKxLWiPh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
c1b3fcccdb47e9bb95f55168612ea0636e9eb8003c65e97db55ab8ebc554f28e.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections