General
-
Target
ceaeee528c9e30b416f3ec05328bca9009416c6512629e62ac420e426048eb05.exe
-
Size
707KB
-
MD5
862a817bf9242b469c42ad2289078616
-
SHA1
096cea086cb90397eddfbe02826e7914ab6e8bb4
-
SHA256
ceaeee528c9e30b416f3ec05328bca9009416c6512629e62ac420e426048eb05
-
SHA512
6870f2991b012769fd1bc1180d6fc622f63defa994f8d1afc33e68e332827c18ec379106488c94e919efa5a132f1b73a9491fabee5318a136f1301dfe63642b5
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1M8wvnh:6uaTmkZJ+naie5OTamgEoKxLW3uh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
ceaeee528c9e30b416f3ec05328bca9009416c6512629e62ac420e426048eb05.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections