General
-
Target
eae7ebc28cf9a3c40cc228225b5923615f76fa99fddc3409f841c41ebcff9c12.exe
-
Size
707KB
-
MD5
b16df17c479912fb747c934f67f2d875
-
SHA1
7085c845f5924416638d00b88f039c2495870576
-
SHA256
eae7ebc28cf9a3c40cc228225b5923615f76fa99fddc3409f841c41ebcff9c12
-
SHA512
5f9fb5608dea0d66f3ad56311184f15790f095a193d93b9825832a53627e7fb9c1824eb2e386df0cf4bf608b661ab802196162f982688fa6d3e1a6bf5dda8442
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1H8rvnh:6uaTmkZJ+naie5OTamgEoKxLWu7h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
eae7ebc28cf9a3c40cc228225b5923615f76fa99fddc3409f841c41ebcff9c12.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections