General
-
Target
eb8a12eff6b02633f8d522c6b9a020814a626ff87db21f262e2d9919881fb8c0.exe
-
Size
707KB
-
MD5
ca04e53480e2076385be2584dd974e2c
-
SHA1
29b3ba98f534b00e726a20a2c3bd31f0ec07078e
-
SHA256
eb8a12eff6b02633f8d522c6b9a020814a626ff87db21f262e2d9919881fb8c0
-
SHA512
32b484464384f6851552d260aec3166c7899814d8268ec3864771a1579cd33aecefad80052fb97b7681423b85fdc84df28af2fffaa0edc4ad0a27dde3c9c884e
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1o85vnh:6uaTmkZJ+naie5OTamgEoKxLWL9h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
eb8a12eff6b02633f8d522c6b9a020814a626ff87db21f262e2d9919881fb8c0.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections