Overview

overview

10

Static

static

10

292c42ad0d...31.exe

windows7-x64

9

292c42ad0d...31.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    292c42ad0d42dcc74312d69b6dabca6218dc2e39f139c15812e0228d08f5ef31.exe.compressed

  • Size

    99KB

  • MD5

    2428881b7d669d612e60183b99d09122

  • SHA1

    3cdf872f9937a02cf8aa53119a5208c98ed8de6b

  • SHA256

    e22563d1c463fdac9e000fa29ee6559693ec9b22db6a2647d3d0a32ac3c8a458

  • SHA512

    134b0262e2d211f4c908fb2481343457dd930b837b4ea34676e794a1eef06d7a1d43dee1a444dbdd1cd8ef930355f117d66ae1d40bf72de584314cc445b6a48f

  • SSDEEP

    3072:P+iJSuICoVLop3pYTGGcBtkowoxxnNycSi7LTl:vguYq2GGEkowCFpZfT

Score
10/10
upx

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 292c42ad0d42dcc74312d69b6dabca6218dc2e39f139c15812e0228d08f5ef31.exe.compressed
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections