General

  • Target

    25c97f60f81fd3d8dd09b151c2db990d497f1229d8e39d7019076a7457a35c0e.exe

  • Size

    216KB

  • MD5

    3aa411d2e4f2848af4a9689fe2e9aa96

  • SHA1

    502581f44598416dc250db3d60b6b60481b91258

  • SHA256

    eb5d71713a48a8ac5b376e451bd2b9b2fb9de297831cdb0f9606721411551507

  • SHA512

    57e83e49ecfbeac6d0c19424c30fc2c5caac358f05cfbd2604905aa2e69a662865d9adc87299cab4b0acda9a5060d74fd6c110f2feb86061c76ecbb53c2db414

  • SSDEEP

    3072:m17DaAz38w3v67F6PFwgBZTGFKQ+avVe+gGooSlFC2OLKKZAFEMpo4Iv1k:Gb8vF6Pf2KQ+aVB2fJqh4Id

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 25c97f60f81fd3d8dd09b151c2db990d497f1229d8e39d7019076a7457a35c0e.exe
    .exe windows:6 windows x64 arch:x64

    e368d6bc3e0ef21bbf5b85202694f447


    Headers

    Imports

    Sections