General
-
Target
5425e988f4427fd1a56dd6616f5b7dc6308fb3ea29babee09242be1cf73c15bb.exe.compressed
-
Size
99KB
-
MD5
990354fb58448a1a224c3be180e575d9
-
SHA1
d5f16148af1f50396beac5a56e507ec14eb295c4
-
SHA256
58e5c39d780435909c4988518b3d5d33b3815429c005420cb61e8d3522fb5422
-
SHA512
6dc886552d6b938e6fd9379d3c1e5f61b042136e18413208dfe1a8b2de813cf725e82b063b699637b00b04cd55c3ef2cf3e42451926369cc606a42ff7f6073c6
-
SSDEEP
1536:1Ij4wyUN3HZUR5WnPszr0MBEJVLcZL82ZTBv2caHwaCB284O+cn:cuUJHZU5WPLMBEJlcGE7aHwa
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
5425e988f4427fd1a56dd6616f5b7dc6308fb3ea29babee09242be1cf73c15bb.exe.compressed
Headers
Sections
-
out.upx
Headers
Sections