General
-
Target
bb1a6cdd916a8ffdd1223c1d3e6de0c578bd5d3f1da3d029428dd78c67a336e4.exe
-
Size
707KB
-
MD5
07eb779b5006348ea0ea6b5bbcf89d10
-
SHA1
9925e25ab6c96aefd5c3b20e79cce68201a7f0e4
-
SHA256
bb1a6cdd916a8ffdd1223c1d3e6de0c578bd5d3f1da3d029428dd78c67a336e4
-
SHA512
fed25370d7ebca555165878cd0054d0b27aa451107b1e7478d7a62e990a189eaba89286455121dbebbb35ebe049f453a2da4b27efe60a8cb1a169f1ef2c1966b
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1N82vnh:6uaTmkZJ+naie5OTamgEoKxLWoIh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
bb1a6cdd916a8ffdd1223c1d3e6de0c578bd5d3f1da3d029428dd78c67a336e4.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections