General
-
Target
e47f2ec27a3582487b892824f146f028baab6773031dd0a2f390d7148992fd56.exe
-
Size
707KB
-
MD5
836b0685379639cc537a8a9a4584f1ad
-
SHA1
53503cb5b87f49575bb66f77f20cc16e0cc55fd9
-
SHA256
e47f2ec27a3582487b892824f146f028baab6773031dd0a2f390d7148992fd56
-
SHA512
01cf8c4f23e39c1a60296221dcd3bda44fd8886505bb0142b66396f36069e8e485d846d334c6673303451b3dd66b6617c7de5197b266a45f4aa9fe17d22d9fdf
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1o8lvnh:6uaTmkZJ+naie5OTamgEoKxLWLBh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
e47f2ec27a3582487b892824f146f028baab6773031dd0a2f390d7148992fd56.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections