General
-
Target
25c97f60f81fd3d8dd09b151c2db990d497f1229d8e39d7019076a7457a35c0e.exe.compressed
-
Size
99KB
-
MD5
409527c3b2b7c5f1dffe216b37d2dfdb
-
SHA1
b1965a1dfd864f787d59853dcc4e432c2de2f972
-
SHA256
78d34353966b77104a092dcedbafe72b3a1303ca490c5c8ea5a5037fbebe2a02
-
SHA512
1cdb255514eeed58a06ddebc62e4a65c6cad35c0c3162ca9f9edab62d1029da65cb0b5f35756b4c1f0b6db8a9cfc67150058b5d540d2c6b05534e94e7882a4c9
-
SSDEEP
1536:gIj4TqMkoTSn96Qz/YkrlbNEAjNrkN8Wy11VwpC6GX9zpZtrR6Shhd9Wn:Vk2D6QDrULy13r9zpZtrR6SB9
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
25c97f60f81fd3d8dd09b151c2db990d497f1229d8e39d7019076a7457a35c0e.exe.compressed
Headers
Sections
-
out.upx
Headers
Sections