General
-
Target
e2393a8b1205ac88685c0273f5834b12ab8e9ecbf081ab7ebfd3917d4d7bd23d.exe
-
Size
707KB
-
MD5
de3a16f643afe51804fe5edcdb25436e
-
SHA1
4fe4dcc8ca7e5b1a1883df319ed8e322700828b4
-
SHA256
e2393a8b1205ac88685c0273f5834b12ab8e9ecbf081ab7ebfd3917d4d7bd23d
-
SHA512
3ac7cb18397ebf00803998ea7af5482b014c06e118ccd2bb549c63a75bf03263eef770db2264684bdf835067f1a3880551812c45078afed12c2f43017a854fa3
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza158ivnh:6uaTmkZJ+naie5OTamgEoKxLWUsh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
e2393a8b1205ac88685c0273f5834b12ab8e9ecbf081ab7ebfd3917d4d7bd23d.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections