General
-
Target
e571c3064ce4ff666c28419e895b6659d196a4538f0bae82aacfb38c5d96f57c.exe
-
Size
707KB
-
MD5
00dbb610896e9400c961d11b295d17bf
-
SHA1
96a0ea0f088d2838219f2561b6ea265e28a27062
-
SHA256
e571c3064ce4ff666c28419e895b6659d196a4538f0bae82aacfb38c5d96f57c
-
SHA512
87414e21d81ddd99d4d479b181bde0da8639adc352ce87ca7d836a833bdd2f5aa2c385ef6ef12d6fd6ee378ff59a20c429b386fb2bd80f362846b51e8d3d37c1
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza168evnh:6uaTmkZJ+naie5OTamgEoKxLWZAh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
e571c3064ce4ff666c28419e895b6659d196a4538f0bae82aacfb38c5d96f57c.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections