Overview

overview

10

Static

static

10

3c30f544ef...d2.exe

windows7-x64

10

3c30f544ef...d2.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3c30f544ef7d6b3c031197277f963bbd71e97969b2bf04c9755f1662d2b5ded2

  • Size

    707KB

  • MD5

    f4ce3e4489eabc70e1106beba4e04880

  • SHA1

    43533f57ee58be2f8196618c56adf1039f53c7a1

  • SHA256

    3c30f544ef7d6b3c031197277f963bbd71e97969b2bf04c9755f1662d2b5ded2

  • SHA512

    55b44677125c4488698f8f9d2b15c675a3608331334ef89bd60725c682fd96a0a9704e51724b5cd58bb409fee2035919dd80a8f3be6e5930a1a61e42091a53ff

  • SSDEEP

    6144:lcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1m81vnh:5uaTmkZJ+naie5OTamgEoKxLWVxh

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
  • Detects executables containing commands for clearing Windows Event Logs 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3c30f544ef7d6b3c031197277f963bbd71e97969b2bf04c9755f1662d2b5ded2
    .exe windows:5 windows x86 arch:x86

    2f7da257a3159bdb9faeb823ef872a56


    Headers

    Imports

    Sections