General
-
Target
d3f00a58082860c8281f7960ea66f1c302f110503fc3055d0f85be287ffcc8e1.exe
-
Size
707KB
-
MD5
3ee72407f34f78d24f705afe7d9d5645
-
SHA1
9276876599b30a529537f2d70601ec89b1b7e3fd
-
SHA256
d3f00a58082860c8281f7960ea66f1c302f110503fc3055d0f85be287ffcc8e1
-
SHA512
e8cc0be764d8f946047331399bf417c280c39c3d5d5e1e0dfcbb7d32d401422f7e4b25e9cd2c8b12600c45b7c434a59680e0c4b7292581131bd2cc5863533ee5
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza148ivnh:6uaTmkZJ+naie5OTamgEoKxLWTsh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
d3f00a58082860c8281f7960ea66f1c302f110503fc3055d0f85be287ffcc8e1.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections