Overview

overview

10

Static

static

10

2edb4d96b6...40.exe

windows7-x64

9

2edb4d96b6...40.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2edb4d96b656f82dad7fe303d57ab781d45d9cb240b9989b0b2dd925032dd440.exe.compressed

  • Size

    99KB

  • MD5

    5f86349b43ac70b0ffb39fcedb4ab5f7

  • SHA1

    db96c357f84d18b750a71569e91db2ae7a1093e2

  • SHA256

    fa7266e16d5560eeeceff3c5e5c007b2346c6c0c1735af5b08ea38623c924512

  • SHA512

    d97282fff56df83df98667118cc33b003622990ad2562766a9bc5f924dd807331c4d43cf2b4fcd5b3713d3e7bc4cc93e4dfef49f1856a5afd227d01c9d9a0ec4

  • SSDEEP

    1536:/Ij4fwAbdFi2OmBNxMRTjLOXGUhRL0FaCIK5apwHEzzAL4W3n:+QwAji7uN+twxRLazIoIzze

Score
10/10
upx

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2edb4d96b656f82dad7fe303d57ab781d45d9cb240b9989b0b2dd925032dd440.exe.compressed
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections