General
-
Target
1e58c6cc8344e623996b0094194e9d903c4c0bb61343c5e26b6d69e18e0cf044.exe
-
Size
707KB
-
MD5
3ac006d107c6af2c5f4615afa7816fdf
-
SHA1
f205d7a3b7c98afeab1e88c98cec6050e50aa792
-
SHA256
1e58c6cc8344e623996b0094194e9d903c4c0bb61343c5e26b6d69e18e0cf044
-
SHA512
6de961a93e92042e18c6cab92b667b1d0c2b0a748be02f6b78fc42ff041ccb15f4b39a9484e728a8b6526f964cda426d8b4e960b886c1e1b04fa43068ce496c9
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1H8mvnh:6uaTmkZJ+naie5OTamgEoKxLWWYh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1e58c6cc8344e623996b0094194e9d903c4c0bb61343c5e26b6d69e18e0cf044.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections