General

  • Target

    49585c9b10e68be20e681738a86d62b427ecfc951d2952ab51f04cb660db7785.exe

  • Size

    216KB

  • MD5

    5f1f079b8d6e64cffeb5eb3e3b70ff72

  • SHA1

    1185abadd0c7e4fb32a9fce150a7c8bb92c1b0ea

  • SHA256

    903783fd933abfc14fe4227434951f26398dfcad35cfd542182ea08fdeb9ed25

  • SHA512

    240969359050d8792e2afbc3692055f9289241bc5dc8a6e586c187eff4aa1a1c7db27c65e535e1dd8f110dfad2854540963c37f8aee3152131b5f5b4d73caa7b

  • SSDEEP

    3072:m17DaAz38w3vq7F6PFwgBZTGFKQ+avVe+gGooSlFC2OLKKZAFEMpo4Iv1k:Gb8fF6Pf2KQ+aVB2fJqh4Id

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 49585c9b10e68be20e681738a86d62b427ecfc951d2952ab51f04cb660db7785.exe
    .exe windows:6 windows x64 arch:x64

    e368d6bc3e0ef21bbf5b85202694f447


    Headers

    Imports

    Sections