General
-
Target
eb8586c746ab079f6e9ccead6ab1307822e72dfd37f0aa4bcf333b5841d4e5fb.exe
-
Size
707KB
-
MD5
b16b5958953587b1002a71398673642a
-
SHA1
e53518abd22807e08e361a28f63085b1d789d9b7
-
SHA256
eb8586c746ab079f6e9ccead6ab1307822e72dfd37f0aa4bcf333b5841d4e5fb
-
SHA512
fcad6fb2d47b0db513f985b53f0e178eb537eeabaa78bc172469a455bfbdc2b60f4fc23afe132675630901b9d9f70e1eaa52f9ff7dbd33a2c8ecde5e3f62df88
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1T8Gvnh:6uaTmkZJ+naie5OTamgEoKxLW64h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
eb8586c746ab079f6e9ccead6ab1307822e72dfd37f0aa4bcf333b5841d4e5fb.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections