General
-
Target
2d6cf28ce69f1c741428dc70a9f68b39a5091949e133c9873682a834b966eb80.exe.compressed
-
Size
99KB
-
MD5
5b39bf3538f8452ee4550096bbcd4b3e
-
SHA1
3f55596a217dff45e5eabfa3e7b41b99acc7995c
-
SHA256
c43966dbfa957664a3fc479bdbf5b9d2ef7b4f72421aa836a7a904048720a80d
-
SHA512
d3ea4604abafcdc91f924e1a4699df6bf75090e34fa6bb580ab703b8ab2d9032f056d01d9a8f98175b5f3d2ca566dce1b8c9e31d0fbb3c0cf4356945c14600aa
-
SSDEEP
1536:FIj47xy5MAG/ePWiwEqYr1xJdLKjyxDJ9DlKvebLKvCiMHrn:sixifxrHb1J9Z9bcCiY
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
2d6cf28ce69f1c741428dc70a9f68b39a5091949e133c9873682a834b966eb80.exe.compressed
Headers
Sections
-
out.upx
Headers
Sections