General
-
Target
e8f034a7a046a527a84bcb99cf56b8bbefcebe59df0cdcb816ef8d0d51c2ee7f.exe
-
Size
707KB
-
MD5
5e73723c394ef2d0c91e1db9da6e72a2
-
SHA1
026d018bd51e29e5edf17b90a4510b4bdef1451c
-
SHA256
e8f034a7a046a527a84bcb99cf56b8bbefcebe59df0cdcb816ef8d0d51c2ee7f
-
SHA512
aec929c96850a38d18c0b9f1ff552dcb526a1cbef2e6757478f2895f783027ed8370326515309ac4030c57a21ad3e0df2ad7fe63da0ad411841a6ff990966328
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza178pvnh:6uaTmkZJ+naie5OTamgEoKxLWqNh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
e8f034a7a046a527a84bcb99cf56b8bbefcebe59df0cdcb816ef8d0d51c2ee7f.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections