General
-
Target
c3676cc2f4bf91eead178da5fc66acd2747d964030c2a7efea31cc89d8458c20.exe
-
Size
707KB
-
MD5
0c24ff56eb76f52931061cf2ced9756d
-
SHA1
b9b84390a4cf124ed88faee1371f5f60c657f988
-
SHA256
c3676cc2f4bf91eead178da5fc66acd2747d964030c2a7efea31cc89d8458c20
-
SHA512
c8f6d86796e9d39ce8e584edbd0fe8b0ad3e2da0cad2c4ae0c74db092ac5453eab721d0c4b60bdbee9e14ef7fddbdf6dbc09007e0a65112c33df84c7da8ac58f
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1k8Zvnh:6uaTmkZJ+naie5OTamgEoKxLWPdh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
c3676cc2f4bf91eead178da5fc66acd2747d964030c2a7efea31cc89d8458c20.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections