General
-
Target
e7607830d12ce66b63a551c3ddac21be73795a1f989d0d1da0255ce4ca5c18cb.exe
-
Size
707KB
-
MD5
dd2794d147b52da3c832a4575ad95374
-
SHA1
bc15120517a524967cf9142995b1950c34c48532
-
SHA256
e7607830d12ce66b63a551c3ddac21be73795a1f989d0d1da0255ce4ca5c18cb
-
SHA512
e4af5b3290169325a46f13d99dbdedd07ad2bab073f00b258452cb93b08182be61448f84ef5b4deebdae00b96910fcf06ff90600f47a4e6560346fdd20e812f5
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1g8tvnh:6uaTmkZJ+naie5OTamgEoKxLWrZh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
e7607830d12ce66b63a551c3ddac21be73795a1f989d0d1da0255ce4ca5c18cb.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections