General
-
Target
e1c6a6647dce80364ddb76a1e53aaaa65ae0546217c8c0156e8dd6a1a2e78407.exe.compressed
-
Size
99KB
-
MD5
6d074c00d11842068ea8640ae45ae1fd
-
SHA1
f6a9656a29158b375ca7fa52e2ea8a28cf6a44ed
-
SHA256
8903d3c029ebc76e682d362976c46a5367d42c3fa3edcc6c9caff33169b49f15
-
SHA512
6ca3539e3bb40b740cb3dc9deae6c2a557bde9a5f0a1a186c8115e4826bc94535a0377e1d218e90ac1afedb5a4f895d6e5947b45f4abbbab1fa3077eb6a7a73f
-
SSDEEP
1536:oIj41sNwRQM0nAK/ZEm4trpY0F88iEnpkhj6mgLa8ae1gDkL8Vfn88Sn:9gsJMsxEppHkhu/aeYsmh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
e1c6a6647dce80364ddb76a1e53aaaa65ae0546217c8c0156e8dd6a1a2e78407.exe.compressed
Headers
Sections
-
out.upx
Headers
Sections