General

  • Target

    4a11b257b2c12a77e16e5d2ba735d24a3092ba52773be43520b1fecb253ad764.exe

  • Size

    216KB

  • MD5

    89bd7a775337d96d0aca2a87107ebd93

  • SHA1

    5e1d95de8db5d25ecc91bf92add8dc7cc908e984

  • SHA256

    fbf217ab8daaecf8825f65ba068b39fc031c859a69c1a619ee464dba27631db0

  • SHA512

    270bb3b08e28016f7f18f35334287ffd87bdb11ab71774e2f11130bc2c211a3784c57e6629d8c4d5aa687f161fdee59016fc7155df4bdb7e80ab955f4f091011

  • SSDEEP

    3072:m17DaAz38w3vl7F6PFwgBZTGFKQ+avVe+gGooSlFC2OLKKZAFEMpo4Iv1k:Gb8EF6Pf2KQ+aVB2fJqh4Id

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4a11b257b2c12a77e16e5d2ba735d24a3092ba52773be43520b1fecb253ad764.exe
    .exe windows:6 windows x64 arch:x64

    e368d6bc3e0ef21bbf5b85202694f447


    Headers

    Imports

    Sections