General
-
Target
e76a86a5dcb7fa326a25f1b5998dc397f63a76180b144442c3551c4e437514f3.exe
-
Size
707KB
-
MD5
70eb1bfdf1ba1d997508868852f7c395
-
SHA1
c2a7f546b2db08e84fb76ca4138ed4f6489926c2
-
SHA256
e76a86a5dcb7fa326a25f1b5998dc397f63a76180b144442c3551c4e437514f3
-
SHA512
52966065473575f0787d3a51087fc6170dfa4f28029d9c34547c1c55190135ff83d027d8da192728802bc436916a0a7ba3b0b48be929d2885aaca4ba564aa67d
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1H8tvnh:6uaTmkZJ+naie5OTamgEoKxLWuZh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
e76a86a5dcb7fa326a25f1b5998dc397f63a76180b144442c3551c4e437514f3.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections