General
-
Target
bc707d2dca470e591a5825e7009dbe29cf0060795b7bb6e2621437e707b7a13c.exe
-
Size
707KB
-
MD5
c831566741cb3b382e506f8e0a6e6b6c
-
SHA1
a396f58a6da3172d4ac7ca0df9cb7c60d6bf09c4
-
SHA256
bc707d2dca470e591a5825e7009dbe29cf0060795b7bb6e2621437e707b7a13c
-
SHA512
e3fdef4fd95fd60dff778c874c85b9e8306aa487676ea28f8283b31f43859a7d0b32a388d8b0a706ba90e60e6a8ef1abc5a73e9058860b563e0a53db62182c6f
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza198Qvnh:6uaTmkZJ+naie5OTamgEoKxLWYOh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
bc707d2dca470e591a5825e7009dbe29cf0060795b7bb6e2621437e707b7a13c.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections