General
-
Target
0e13b6d16699df2a12343ffb0b34e6499d54c1521a2c67c3efff9fa86951da84.exe
-
Size
707KB
-
MD5
847b1943e44fbdd67f8b600cb69fcd80
-
SHA1
73a2ff5cb36b3c099128bf415a7251ebc1ada63a
-
SHA256
0e13b6d16699df2a12343ffb0b34e6499d54c1521a2c67c3efff9fa86951da84
-
SHA512
4aab62817663c5d0f6963bea17d1e22227ced88759a8f682d382f0b4b0a5d77b38cdf1c1d210201859cf1c94b32e5010ae2fb3c5ca60ca1ebb3e600617fc8d27
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1U8Cvnh:6uaTmkZJ+naie5OTamgEoKxLW3Mh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
0e13b6d16699df2a12343ffb0b34e6499d54c1521a2c67c3efff9fa86951da84.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections