General
-
Target
196955fa97bbada2905b0ac72183e3c3f3ad0ca605d83e1474bcb2818259a5c7.exe.compressed
-
Size
99KB
-
MD5
6bb71a3d883c87fbe767f3dab3ae9e81
-
SHA1
1ae83121ed7bc73c228018970661b4d6a15f0dd5
-
SHA256
1bb2a3d8883d4e78b2f0697f8999ce7be6dfb64e46bd76ed6bfc190436a8869a
-
SHA512
3bd7952c0b90419dd0c84c86694f317114ebb5cdb1aee4a05016d5a18ceb5434ee630ad7cd6aa2f92e32f2633bd3131ce661093169d45361f00c5ba5fb375a89
-
SSDEEP
1536:gIj4dqMkoTSn96Qz/YkrlbNEAjNrkN8Wy11VwpC6GX9zpZtrR6Shhd9Qn:V82D6QDrULy13r9zpZtrR6SB9
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
196955fa97bbada2905b0ac72183e3c3f3ad0ca605d83e1474bcb2818259a5c7.exe.compressed
Headers
Sections
-
out.upx
Headers
Sections