Overview

overview

10

Static

static

10

013c036781...a7.exe

windows7-x64

9

013c036781...a7.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    013c036781a206d9c9f4e2d2b4e101df93e4985df54431a62effc900766534a7.exe.compressed

  • Size

    99KB

  • MD5

    4070675035badaf004c1e5546b75c7f9

  • SHA1

    a4b96a64bed84bee3fce8d61f21ef9fac895afa6

  • SHA256

    276efddf06fe4a758297449fa03f4df13634a23c9019dfd56ad3f2273c3f4d4c

  • SHA512

    83e48be18d14fcf1551c8dde041029ddbd863c37d0e3b5243e89c2ad36e7b84e6325c64f3d5507de592909d6fd80884e49b10f09482c3605ae9bc286e4851d6a

  • SSDEEP

    3072:zL0ZoJSuICoVLop3pYTGGcBtkowoxxnNycSi7LTl:sZoguYq2GGEkowCFpZfT

Score
10/10
upx

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 013c036781a206d9c9f4e2d2b4e101df93e4985df54431a62effc900766534a7.exe.compressed
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections