General
-
Target
ec1c06a5f74be6614b4fcb702590279fb5e02c23b23a0a30fb33dffb7fd98b29.exe
-
Size
707KB
-
MD5
fb15b5b189e6454469e0a7ee7fc076e0
-
SHA1
8a97b93c9a7aa2190e866d3eddf6de11bee3cfa8
-
SHA256
ec1c06a5f74be6614b4fcb702590279fb5e02c23b23a0a30fb33dffb7fd98b29
-
SHA512
26709c9c219af018ba61e58060db49c837aa86e1a1e0fcf07c9ce438b6501833cea87c9c7f5b9a32dedeea266d004b043eee11e0bec86c5502ba907846f8f993
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1X85vnh:6uaTmkZJ+naie5OTamgEoKxLW+9h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
ec1c06a5f74be6614b4fcb702590279fb5e02c23b23a0a30fb33dffb7fd98b29.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections