General
-
Target
cb3acfce4c686123668aede33ee801d0159e42d8dbf5528da74a2d3029a292b1.exe
-
Size
707KB
-
MD5
e8ba560ad716bc13bb57fb374c864115
-
SHA1
59d8d3a1a6b4f9a5cba9acd0240c65fe5cbae98f
-
SHA256
cb3acfce4c686123668aede33ee801d0159e42d8dbf5528da74a2d3029a292b1
-
SHA512
e03f335a05160bd613fe8cac3fa85bb92fa47e978cc518ecabb0928b8c17f7f4a3b7b75e23fce0ebba6d7227683dcf5b44a49d6c8635a5d4928ffe059afd70dc
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1a8Avnh:6uaTmkZJ+naie5OTamgEoKxLW5eh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
cb3acfce4c686123668aede33ee801d0159e42d8dbf5528da74a2d3029a292b1.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections