General
-
Target
e47395b6b98198e5964ea4a2f51cd0817d8f3ffbe76917bb3d5f2bfcd85f9cff.exe
-
Size
707KB
-
MD5
ca5d01d15746ce11b94bd42f5a5ebc92
-
SHA1
bb241a76b824290125669a669eb4294f61a4b624
-
SHA256
e47395b6b98198e5964ea4a2f51cd0817d8f3ffbe76917bb3d5f2bfcd85f9cff
-
SHA512
2595d59d1a92f11a63e3c06c297096c4318eed7fb1e3e0a278a372b69a727d8dc6c8eff786aebc8b277ba6ce7147a1b2dbc5080282f4e159a260d604b8ac3ab1
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1m8Fvnh:6uaTmkZJ+naie5OTamgEoKxLWVhh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
e47395b6b98198e5964ea4a2f51cd0817d8f3ffbe76917bb3d5f2bfcd85f9cff.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections