General
-
Target
e48a94d5a10072b8141eece213df61d271aae7d16134439342243c70f019cb95.exe
-
Size
707KB
-
MD5
2a3a426887354715db282be2db90f970
-
SHA1
a82905dbd0886cb8a75745c2ebf1f1412cfdc4e3
-
SHA256
e48a94d5a10072b8141eece213df61d271aae7d16134439342243c70f019cb95
-
SHA512
b9916bf9a46d9b2e577fea063b5081c456b9e603e85fcd0d5c21ed11b383d0b7b9208cfaa692462ff2deb86a224331d66db85793f0e3c8b24bccb84a9000f17b
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1D8Kvnh:6uaTmkZJ+naie5OTamgEoKxLWqEh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
e48a94d5a10072b8141eece213df61d271aae7d16134439342243c70f019cb95.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections