Overview

overview

10

Static

static

10

e5cb496aed...89.exe

windows7-x64

10

e5cb496aed...89.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e5cb496aed27a7f26c2555939b902563e43ffd129f051050b6aa304c0ba90b89.exe

  • Size

    707KB

  • MD5

    bcd68b1251400b53f7aebd7cb8892dd2

  • SHA1

    64aad9d36556a4f137831ba5fc9ff55fd9c286ba

  • SHA256

    e5cb496aed27a7f26c2555939b902563e43ffd129f051050b6aa304c0ba90b89

  • SHA512

    24f8e1b8b5849cb9b49165acc174161b05a8a82746e661e5ac49e461be85cb813fd9119539e92c84454ffc74160f69a97365ab70b0dcfd65d072b0aab6adf164

  • SSDEEP

    6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1+8ovnh:6uaTmkZJ+naie5OTamgEoKxLWVWh

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
  • Detects executables containing commands for clearing Windows Event Logs 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e5cb496aed27a7f26c2555939b902563e43ffd129f051050b6aa304c0ba90b89.exe
    .exe windows:5 windows x86 arch:x86

    2f7da257a3159bdb9faeb823ef872a56


    Headers

    Imports

    Sections