General
-
Target
e910c4803d10f85cb5f86b0dac83dfe38f76a1ac5ea90bcc3f10999253e06979.exe
-
Size
707KB
-
MD5
00a763fc0a4591c43299939684e40e2a
-
SHA1
6d1166a2495bb5287b6e99baa550e8d5498557c0
-
SHA256
e910c4803d10f85cb5f86b0dac83dfe38f76a1ac5ea90bcc3f10999253e06979
-
SHA512
12cb8dc2de62af0193d53861355b47df00e42ed1414b60ff48846f552057599618764c0aa47347d8582eb30815430bc61f8896e7a3e458caed87d228d1d002b5
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1F8svnh:6uaTmkZJ+naie5OTamgEoKxLWwyh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
e910c4803d10f85cb5f86b0dac83dfe38f76a1ac5ea90bcc3f10999253e06979.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections