General
-
Target
beea5f7867aa30de282dd35730f8bc01a193aadde7b0f372e54e746ace314b46.exe
-
Size
707KB
-
MD5
e249fc1b14b1c8c7082f46be63a17023
-
SHA1
7c92e14f58b5ba62ead6c23a578cfc8af1736c83
-
SHA256
beea5f7867aa30de282dd35730f8bc01a193aadde7b0f372e54e746ace314b46
-
SHA512
4d65f62620914b7ddde21898710e4cbfdc3ddf6c2ac39d961a464934904a40325db11dda0a616e8e049bf5a630b353b673319dd98901a19745f245d8e1c59d9d
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1z8mvnh:6uaTmkZJ+naie5OTamgEoKxLWSYh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
beea5f7867aa30de282dd35730f8bc01a193aadde7b0f372e54e746ace314b46.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections