General
-
Target
eab862eced6203f5d971871c5cbba5308a004369b10be673d26b867d6a75a17f.exe
-
Size
707KB
-
MD5
05c5e9d83437dbc65fec569430b166de
-
SHA1
e48c2a9a4baa164319261473802c00b243c44c1e
-
SHA256
eab862eced6203f5d971871c5cbba5308a004369b10be673d26b867d6a75a17f
-
SHA512
dbe284f184fde0362b5a1c8a89f840e6958d63b5b8c46ec4ebc55d93899b867101b97101a8dc59176cabb24a5a4101f235fb64ec7244f9c23b7d753facb5d592
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1A8Evnh:6uaTmkZJ+naie5OTamgEoKxLWL6h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
eab862eced6203f5d971871c5cbba5308a004369b10be673d26b867d6a75a17f.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections