General
-
Target
bd9bc04f7c19a9eec0df8c20cc2dd7b3af4d772104a321c126c45c12f8123422.exe
-
Size
707KB
-
MD5
bc86425a624a2ee2d2db38c80e656fa5
-
SHA1
b64d819be5d56fa828e969841b7aaf5a92dfdc7c
-
SHA256
bd9bc04f7c19a9eec0df8c20cc2dd7b3af4d772104a321c126c45c12f8123422
-
SHA512
09a7639954778511345f8586cd10e108338b39cd2128f958fb68f67c2cc767ec2d4bb088c133c2648d1be38cb27674d0e6e3132f2b9c07d83743f1f51fdd759a
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1L8uvnh:6uaTmkZJ+naie5OTamgEoKxLW6wh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
bd9bc04f7c19a9eec0df8c20cc2dd7b3af4d772104a321c126c45c12f8123422.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections