General
-
Target
ee27dd7d7cb37954343c70ead5979349cc6e397ab461fba855060ce951356b36.exe
-
Size
707KB
-
MD5
7d7b403c03d069092ec22922a9102a27
-
SHA1
f7b93959db5d10220c514cac598711ed646678df
-
SHA256
ee27dd7d7cb37954343c70ead5979349cc6e397ab461fba855060ce951356b36
-
SHA512
c1625b9a28fd80983c760a686f8b9988cda26eda3350a2553a67619d48ef0d55debd82e859f575362f717394d7d7c9bf5df126554854177fea93aaff4974d6b0
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1i8ivnh:6uaTmkZJ+naie5OTamgEoKxLWZsh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
ee27dd7d7cb37954343c70ead5979349cc6e397ab461fba855060ce951356b36.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections