General
-
Target
e62c39c6d72caa5e5ac0775e8b338c69cc495b99852c7ed1e22a5756ce6362fd.exe
-
Size
707KB
-
MD5
d4f4ada809216019a8f0e74357ad4a63
-
SHA1
99acacc24022957bc8787bc2699f320179255795
-
SHA256
e62c39c6d72caa5e5ac0775e8b338c69cc495b99852c7ed1e22a5756ce6362fd
-
SHA512
48ab512887d25ae96140958469882dfecd466efb67bebb748bdae6990c11682f2b926a89fcae5947f025f6689b2ef658cea68c5e206078253fd418db3bc1a664
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza148Zvnh:6uaTmkZJ+naie5OTamgEoKxLWTdh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
e62c39c6d72caa5e5ac0775e8b338c69cc495b99852c7ed1e22a5756ce6362fd.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections