Overview

overview

10

Static

static

10

16e3f89d7a...0e.exe

windows7-x64

9

16e3f89d7a...0e.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    16e3f89d7affa02a825cf1ce4cc14ef89983f64677e80387acdd8448d076840e.exe.compressed

  • Size

    99KB

  • MD5

    4355529b0fdbcee48cb96b52713df814

  • SHA1

    61a7a4ff8d606b423848b8a97ae93f319e87784b

  • SHA256

    e2cd8bd394d71206cd7e88a01b1a0b6b1ef2527e4249913e267987bf80d57e53

  • SHA512

    8330770b30fdb66aa7b5fecb1a935ec5c74abd89b58029b6cc238820c2c895412d36ce1ba22e82b6d3eb4b94dd37ffbb6f3653d702f7acdd3e9438bddafaf17f

  • SSDEEP

    3072:nwDtaohgelT+4x6oyZ8f85Uc+CfAuC5Es71lhF:wYR8hfM086y+Es7

Score
10/10
upx

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 16e3f89d7affa02a825cf1ce4cc14ef89983f64677e80387acdd8448d076840e.exe.compressed
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections