General
-
Target
e4302259c8c97b0a44c4a473edf7a91e499990e8971839ad978c729cf6b567dc.exe
-
Size
707KB
-
MD5
026114d4c2d46c59ffd02a239bb202c0
-
SHA1
c6ba6b6e9547f23851bcca60621f51d91296999a
-
SHA256
e4302259c8c97b0a44c4a473edf7a91e499990e8971839ad978c729cf6b567dc
-
SHA512
db3e57846a7474e066e5db4332f3c6bb57a2fca762efabd4c9fc74e1dd0fd16f4e0bc2d5c3b41a7f54c7fa4382c87b438647e4dc186436872d2d65c41dc93590
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1I8vvnh:6uaTmkZJ+naie5OTamgEoKxLWjnh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
e4302259c8c97b0a44c4a473edf7a91e499990e8971839ad978c729cf6b567dc.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections