General
-
Target
ea4d3b980bb7de9adcb392fa03d2331fa984a33c41d9b6a88f773b1689e546cc.exe
-
Size
707KB
-
MD5
1c0b5627b6c83323c59e666ffe67859f
-
SHA1
69737bc01e5ef8221c903491cb954548d440d026
-
SHA256
ea4d3b980bb7de9adcb392fa03d2331fa984a33c41d9b6a88f773b1689e546cc
-
SHA512
2c86b80a5db18af28a8fe3b9f2c87863430ad784f195e8efceaa943ab9d6d772c10c294e8d2c4bf2bade1126bbb8ba5c5eea93c689492df46f7ba3c7a83503e2
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza188svnh:6uaTmkZJ+naie5OTamgEoKxLWHyh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
ea4d3b980bb7de9adcb392fa03d2331fa984a33c41d9b6a88f773b1689e546cc.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections