General
-
Target
e87e53faa56c340a720431efa01283c22c3d96b1e955d010eb05259085bd8a41.exe
-
Size
707KB
-
MD5
16c40f659c300b619f775bd2b1fe876c
-
SHA1
da4bf163a89791ae60d8d56d6098c28035848d99
-
SHA256
e87e53faa56c340a720431efa01283c22c3d96b1e955d010eb05259085bd8a41
-
SHA512
a9f0a6157234a1384849bcc750f2ac8577a69eabe472685697e6b3910a8da58329c22b1d0cf6bc46128e54fd03ab8d67cb2d54d4afbb8be2d492d4fa933b7718
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1d8mvnh:6uaTmkZJ+naie5OTamgEoKxLW4Yh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
e87e53faa56c340a720431efa01283c22c3d96b1e955d010eb05259085bd8a41.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections