General
-
Target
be6ad62da3cd107ef4abefeb031f61e9ed471c3a13f75bed37627a33f6c1c014.exe
-
Size
707KB
-
MD5
f6b606dd16c1f0be7f4dcc75379d03d8
-
SHA1
2d6e4c733425a01f2ed6c560087ab269afeb7d02
-
SHA256
be6ad62da3cd107ef4abefeb031f61e9ed471c3a13f75bed37627a33f6c1c014
-
SHA512
1ecea09f21b5288ab3b2f9cec78afc83b8261503e6b46144fc28cb2c9851a7dbe900d3b83840bc9ef087f0d448022a75d75a161197d57eccdbf3d37d283b0994
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1r86vnh:6uaTmkZJ+naie5OTamgEoKxLW6Uh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
be6ad62da3cd107ef4abefeb031f61e9ed471c3a13f75bed37627a33f6c1c014.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections