General
-
Target
e6518e9baab3d7263f7e7d07a0121eb232088de8140e77e27dd23d685e593ce5.exe
-
Size
707KB
-
MD5
69f8fafe6147f5927030c7ffd81d9cc6
-
SHA1
f521e0c00ccad3da33dddda632869fd74fc85870
-
SHA256
e6518e9baab3d7263f7e7d07a0121eb232088de8140e77e27dd23d685e593ce5
-
SHA512
89a5868f3f271e08a02e59fa6cf09b30cd7f2861c291575fbc452834e20f67582bb5fc8cd0741e3e66c2238453a995723d2168b56dfe78d8ca4271eb25444de9
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1v89vnh:6uaTmkZJ+naie5OTamgEoKxLWuJh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
e6518e9baab3d7263f7e7d07a0121eb232088de8140e77e27dd23d685e593ce5.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections