General
-
Target
bc4cf301f6d48f84513a3c8e0a69aba4103b4801b50636e2ea5a4afba3f4220f.exe
-
Size
707KB
-
MD5
710749143a280b1be5aaa96efb361fa7
-
SHA1
17e39315927dec1599a07dae2161d240bdb561ef
-
SHA256
bc4cf301f6d48f84513a3c8e0a69aba4103b4801b50636e2ea5a4afba3f4220f
-
SHA512
e6b2dbe2251de043c1f300078f82369d91c3a8032951170a13ab0ca98332841c7fd45e447de968140e82ca402d6208479c4dfcbe7f810f7c02aeb68ae0e7f471
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1P8mvnh:6uaTmkZJ+naie5OTamgEoKxLW+Yh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
bc4cf301f6d48f84513a3c8e0a69aba4103b4801b50636e2ea5a4afba3f4220f.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections