General
-
Target
ebf0db038567b5b3d506a7e029ce870925059a110e81a1e6ace3198d1da861e5.exe
-
Size
707KB
-
MD5
86bbab7c5189064ad0006672813e3e26
-
SHA1
2813608228e5aba779a616d7c11adf3079bc0466
-
SHA256
ebf0db038567b5b3d506a7e029ce870925059a110e81a1e6ace3198d1da861e5
-
SHA512
584873abdaead7811c0e6a5293c04bb8676b696e75bdfc9cde3bb1d0fe6200bb70a6f36c3b7a14c85fcf60682f1dd5dcbb43a3316f73975732c6a2dbc59483b9
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1j8Avnh:6uaTmkZJ+naie5OTamgEoKxLWieh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
ebf0db038567b5b3d506a7e029ce870925059a110e81a1e6ace3198d1da861e5.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections