General

  • Target

    3b393dd54e08533c6249b63e9cbba2a942ae0e9f82e4d5b9f927e6052f5c4e78.exe

  • Size

    216KB

  • MD5

    b68ea5af990fb2b99c62464d21648683

  • SHA1

    9e0d37050b4c51663186ff630e0dccdf600ca468

  • SHA256

    6eddca9b342833d443c6133a8d872c2c574582477d1a641c600682a85c0e24e5

  • SHA512

    ffe3801e8323a1e74156b215be8b1b3331a7669bd4e3e83a85ba1bee083c3157b85dedb5c8bfa2dc29ce611937668d5a61090bde388b1dbb4dff692b631902a7

  • SSDEEP

    3072:m17DaAz38w3v87F6PFwgBZTGFKQ+avVe+gGooSlFC2OLKKZAFEMpo4Iv1k:Gb8lF6Pf2KQ+aVB2fJqh4Id

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3b393dd54e08533c6249b63e9cbba2a942ae0e9f82e4d5b9f927e6052f5c4e78.exe
    .exe windows:6 windows x64 arch:x64

    e368d6bc3e0ef21bbf5b85202694f447


    Headers

    Imports

    Sections