General
-
Target
bc3752db8a7c002ef669d320b4c615a7662fbb2ef3e974509a8e2f348d91ec66.exe
-
Size
707KB
-
MD5
44a9f9ae9b5aad3f54f158c9b000a3c4
-
SHA1
830b3bda180b0ae82c09b0e4b5d942f247cb245c
-
SHA256
bc3752db8a7c002ef669d320b4c615a7662fbb2ef3e974509a8e2f348d91ec66
-
SHA512
4734c37d4dfb3ce7e51363d0cac84b8d9b8af6a36f87cb868b97a6d74b5342b8f37a376ea80dcec374a79153785900cc90653d2c04c19d7570238663110429c1
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1O84vnh:6uaTmkZJ+naie5OTamgEoKxLW1Gh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
bc3752db8a7c002ef669d320b4c615a7662fbb2ef3e974509a8e2f348d91ec66.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections