General
-
Target
4ed83d51c5ff7b2182bd0665bc369bd2d07d16937fa6396c5a7ba0ed0f9fbf13.exe.compressed
-
Size
99KB
-
MD5
071dc5d5c98bcfba9c3cf3e45021488e
-
SHA1
71f9be23e9abde3b3c49fd106f1006a5a31f795a
-
SHA256
760e8dc4f9a36675e8f363c9733063e1a27251f151b841243241ff8a4cb81634
-
SHA512
46bf808033dd6b36f89607d0cf114735dda1958ee25cfc40c31c212b2a42ddbd28fcdc9c1b032fbac1df6268222ebda682873ee08620bfdfb850ba9eb62e5f32
-
SSDEEP
1536:tIj4G4GFLJoKTkTqRhM0rDLrLUJhF/5zGZ3eWPujplO178vTPjJ5bHYMwaq5W7n:Ue0Jo8kqh2x4herb7PjjrY8
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
4ed83d51c5ff7b2182bd0665bc369bd2d07d16937fa6396c5a7ba0ed0f9fbf13.exe.compressed
Headers
Sections
-
out.upx
Headers
Sections