General

  • Target

    2b27957f09942a6836b5a12054fcb4de65b9c78ce37615f784fcf447b646da13.exe

  • Size

    216KB

  • MD5

    a61737b4c9b17f0e59165d0bc5bd169f

  • SHA1

    ff498028c4ceca8eb02582b5dde056c9cea3bfae

  • SHA256

    b8cb3d4600989217ad44d4f1abb25749e89bd6539383ce1cb5b2e186316dba5d

  • SHA512

    24f922d91a8e335689400903def6396af8943493ce68b1c9dee88b784c7765b82f4d26058bf47b3bf4c5f3f0003ee71c7c6f21d9d4877042d72d5f7970eaf4ed

  • SSDEEP

    3072:m17DaAz38w3vr7F6PFwgBZTGFKQ+avVe+gGooSlFC2OLKKZAFEMpo4Iv1k:Gb8GF6Pf2KQ+aVB2fJqh4Id

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2b27957f09942a6836b5a12054fcb4de65b9c78ce37615f784fcf447b646da13.exe
    .exe windows:6 windows x64 arch:x64

    e368d6bc3e0ef21bbf5b85202694f447


    Headers

    Imports

    Sections