General
-
Target
e78660f3a309cef81c9b36645e85d0b087f2638c4a4ce1d0d2b246f86218c4e3.exe
-
Size
707KB
-
MD5
0c449887315f2ce1a4c3f3bd299824a8
-
SHA1
dc1c564bfce5554d570b4c4c83f6a81b254053d6
-
SHA256
e78660f3a309cef81c9b36645e85d0b087f2638c4a4ce1d0d2b246f86218c4e3
-
SHA512
96b72e997667dda8519141b549a2928e91e07551e5d0ca43d68220d625ffaeeee4af246d9de826a4c2da5e4a318b6f00d49a822d158da5d92ff09c32f8ad143b
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1m8Wvnh:6uaTmkZJ+naie5OTamgEoKxLWVoh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
e78660f3a309cef81c9b36645e85d0b087f2638c4a4ce1d0d2b246f86218c4e3.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections