General

  • Target

    e240e596fc74128c96188dbc44db52a4dea4f669b8fa0b0d15d27398488d66e7

  • Size

    1.2MB

  • MD5

    40e009fe8fa1905ba8cfa93fcafc2ced

  • SHA1

    060d927913419c04ef9451a898493626f4d67ebf

  • SHA256

    e240e596fc74128c96188dbc44db52a4dea4f669b8fa0b0d15d27398488d66e7

  • SHA512

    5bcf6f30c2f93d8824f7d0b2f253215a9c48a62fe973d4bc429453842a1351ab6ebbf1b0eb9d964d67d486f7f9a209986602f778171e9710c947eb1a50a8853a

  • SSDEEP

    24576:b2JLy+XzVx7lazJuUAz2VT1cbHH1RuTxsovhxQBYWMVzuYoYqPBD3yLC7oIGm:+LXXzNazJuGN1oRuTxhx+MUYoYKBjoI/

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing commands for clearing Windows Event Logs 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e240e596fc74128c96188dbc44db52a4dea4f669b8fa0b0d15d27398488d66e7
    .exe windows:5 windows x86 arch:x86

    f527e8080fac9432953c548a4f7317af


    Headers

    Imports

    Sections