General
-
Target
ecc8fe70db3c2063835718c40b7cd926fcd3b6cc79778b293e78bb0d60b1d176.exe
-
Size
707KB
-
MD5
7158dcc8717f289aadea652c7961a32e
-
SHA1
8e67478aabe0b8090f6c782009085a253715ecbc
-
SHA256
ecc8fe70db3c2063835718c40b7cd926fcd3b6cc79778b293e78bb0d60b1d176
-
SHA512
0e02e50b6397c0b0a14f378e9c89a212430afd9cbbbb8d67b6b1365f97233163c99ace9e259850a8b50da17cd5095a23f8fd16b8958fd61f88e80d1d52f916a3
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza198rvnh:6uaTmkZJ+naie5OTamgEoKxLW47h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
ecc8fe70db3c2063835718c40b7cd926fcd3b6cc79778b293e78bb0d60b1d176.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections