General
-
Target
e94ac4f61c709831976cf08352614aef8e8f9a9e0fd25f4c172421f9b6b038fd.exe
-
Size
707KB
-
MD5
9ea3258cacb573da865ab8a045598ff5
-
SHA1
21e1ec1c53c7789cb42ca0a7f5549654f282989a
-
SHA256
e94ac4f61c709831976cf08352614aef8e8f9a9e0fd25f4c172421f9b6b038fd
-
SHA512
7fdce7d3c5680fa94c79c1fa96fca35bdac410a63393a78d4685b82041164c7289fa448a41ea573bc8bf2557d556baff1b300c6da8161828f21656253eaa44b2
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1C8zvnh:6uaTmkZJ+naie5OTamgEoKxLWhzh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
e94ac4f61c709831976cf08352614aef8e8f9a9e0fd25f4c172421f9b6b038fd.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections