General

  • Target

    144d5d880972a6c3f2d97e83fda304d92bb4f68c0d8f2a965e176b1e4952fbef.exe

  • Size

    216KB

  • MD5

    0a593d5ce57a699d471d83bfe994e266

  • SHA1

    5b1b6cefe6e5b54940cd5f6200f2bf1ed094783c

  • SHA256

    494648553495f19a13f6b687ea4757c7f709d38015fc2440d6e24e20933dcc93

  • SHA512

    50f89afba2b19f1bda53f3a772280128ba829adec548817df46ac7bf4bcf4bb2aee4542f447b1729f75e96b35118f25926e63c600b6b4e336a93634ce79518ed

  • SSDEEP

    3072:m17DaAz38w3v57F6PFwgBZTGFKQ+avVe+gGooSlFC2OLKKZAFEMpo4Iv1k:Gb8oF6Pf2KQ+aVB2fJqh4Id

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 144d5d880972a6c3f2d97e83fda304d92bb4f68c0d8f2a965e176b1e4952fbef.exe
    .exe windows:6 windows x64 arch:x64

    e368d6bc3e0ef21bbf5b85202694f447


    Headers

    Imports

    Sections