General
-
Target
bee4b2e21c591271d0af5e8941e43640d01454e84f53faf23cd93e9c3dd11280.exe
-
Size
707KB
-
MD5
d65c41a870bc80abf07f03c3f5c949c7
-
SHA1
d79f15e8c855ea7bc2b98a8bf296cd2c66a55311
-
SHA256
bee4b2e21c591271d0af5e8941e43640d01454e84f53faf23cd93e9c3dd11280
-
SHA512
305d12137fa6c05b3dc2b43d2de835f2ad063f596928c4b6fadce02b88db2b3718d5d721a4ad711c6aa612c627c26dd2ad2fcc27855dc1f37f57f8c8fca3536e
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1G8Vvnh:6uaTmkZJ+naie5OTamgEoKxLW9Rh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
bee4b2e21c591271d0af5e8941e43640d01454e84f53faf23cd93e9c3dd11280.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections