General
-
Target
e0e6951583d20893fb74c3618ef2afcdcf9e4e43083dff0d09c2625c9810ac63.exe
-
Size
707KB
-
MD5
2571760eab2b24cb0fa0ef31b0e769a3
-
SHA1
62e5fe074e6f73e145421f7175daec7a495576e0
-
SHA256
e0e6951583d20893fb74c3618ef2afcdcf9e4e43083dff0d09c2625c9810ac63
-
SHA512
adc1fcfce673857c93493170eb0402d9ccfea81f4279b126d43100c1862b4c68bf1e9f289fec36d2aea9f2edf10a68d577c6ef56e93dab51dce80db8cad24fc9
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1C8mvnh:6uaTmkZJ+naie5OTamgEoKxLWxYh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
e0e6951583d20893fb74c3618ef2afcdcf9e4e43083dff0d09c2625c9810ac63.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections