General
-
Target
1e5e8f90e8e6d2a358026d4dc2d1441504bcc2a745c01798db8fa9e0ebc0e730.exe
-
Size
707KB
-
MD5
4b8165bf48c78f937b8f78d940fd08b8
-
SHA1
e15ec340b710a0895d20a0ccfc56695710f3625e
-
SHA256
1e5e8f90e8e6d2a358026d4dc2d1441504bcc2a745c01798db8fa9e0ebc0e730
-
SHA512
7538ec407e8e011065a210c24ef9f753734968002b37df55194492c753c5b57cca55a989d41e9a4c4e0e45655378ad81afd1473553aee4af961f49eaff3ccf16
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1qS8pvnh:6uaTmkZJ+naie5OTamgEoKxLWMNh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1e5e8f90e8e6d2a358026d4dc2d1441504bcc2a745c01798db8fa9e0ebc0e730.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections