General
-
Target
0e7ff64192dd7189348d103109b4507fed2bbca04e132ece5179f43ff881f491.exe
-
Size
707KB
-
MD5
efa43f1e228d165d6e6c0ded8990cbdf
-
SHA1
c19a54c04c5a6e1819875ba099faec83ef05a31c
-
SHA256
0e7ff64192dd7189348d103109b4507fed2bbca04e132ece5179f43ff881f491
-
SHA512
9e1645dce444444a45dfece1de0461a08920730ce975017bc60869e4f4a4872853721cddc50551de4926c9170e446302469bac76bfb53995a5557266fed75d77
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza158Dvnh:6uaTmkZJ+naie5OTamgEoKxLWkjh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
0e7ff64192dd7189348d103109b4507fed2bbca04e132ece5179f43ff881f491.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections