General
-
Target
e99f73170c6d6d8da8fe217350ee2de7657696b73079ebcabf61a242d160c91e.exe
-
Size
707KB
-
MD5
a17f40624c86f05221b711702c70dd4f
-
SHA1
f4b6e1c0203baeca7e86094eaa86dc292ddf5242
-
SHA256
e99f73170c6d6d8da8fe217350ee2de7657696b73079ebcabf61a242d160c91e
-
SHA512
aeb6d50e9ce78d4ca43ac5bfcc2b2cc2cb1c9f5a39031f4ea5db24818050aa1207aa20dd1aa139796feed740f83ca27335fac90a17ebb08d45ebc222401735d4
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1P8hvnh:6uaTmkZJ+naie5OTamgEoKxLW+1h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
e99f73170c6d6d8da8fe217350ee2de7657696b73079ebcabf61a242d160c91e.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections