General
-
Target
e0ed0ab7ea736c797914aa3747cadee2050fbeab5a8e6882bd5a39b147cf0228.exe
-
Size
707KB
-
MD5
0f78bca7c385424952fcdafc1157d19c
-
SHA1
cf5a76da885190928a1bceac1f14624b988693fe
-
SHA256
e0ed0ab7ea736c797914aa3747cadee2050fbeab5a8e6882bd5a39b147cf0228
-
SHA512
02e2a0f23d3ec5585e0098a1cce12ae8bda2199e48a338467c4a4838f2d2c84ade4b7afaf30408170555f398dc2b44491c41b3d52ad66f5352ae036e84193027
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1f8Kvnh:6uaTmkZJ+naie5OTamgEoKxLWWEh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
e0ed0ab7ea736c797914aa3747cadee2050fbeab5a8e6882bd5a39b147cf0228.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections