General
-
Target
e2c67f2b82ba64d54f87918de14a31bb0cf5fe6d761372e0aca1d850fe95ea12.exe
-
Size
707KB
-
MD5
819da5d11fd97d1b6155fc3eba2ff63e
-
SHA1
dc14f8bf22b84e1efc7c911e71f3fb69e84cb069
-
SHA256
e2c67f2b82ba64d54f87918de14a31bb0cf5fe6d761372e0aca1d850fe95ea12
-
SHA512
182bac34d1c868fef652712534760178db31714ca618a7fa1f62ed95e6bf42ae1870746bb012270e2cbb196158bae5c71ed8c96e7a8c1567dd9f4e14df8e9d6f
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1L8/vnh:6uaTmkZJ+naie5OTamgEoKxLWaXh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
e2c67f2b82ba64d54f87918de14a31bb0cf5fe6d761372e0aca1d850fe95ea12.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections