Overview

overview

10

Static

static

10

3a37d29291...7a.exe

windows7-x64

9

3a37d29291...7a.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    3a37d29291aae64f0b8b8dc31836428e1200ded348fb4367c80276dfcb4a6c7a.exe.compressed

  • Size

    99KB

  • MD5

    5a98e617cdd38ff198e8055637a7a514

  • SHA1

    63d77b1fad39ed3843dea29c31a74fba82994f52

  • SHA256

    62b0d80836dac39ceceb9ce170ba02b5e0729e703167b8beb0363f87591946e4

  • SHA512

    ea8b4ed195a3039ced965075af57cee1d59f47c5732b91c22479cd9bbd6bdddf28b5c44181e18a052c81f3393eae9b72b63e76475a9bac0898cdedcca64fa093

  • SSDEEP

    1536:wIj4oMkYfu+snbiqBKVkcH2/W3KSjY3rIjXFh5aYqBiQnecwIcx5Boe5fhln:lnM1qbWB3KSjiI/MBtUxNhh

Score
10/10
upx

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3a37d29291aae64f0b8b8dc31836428e1200ded348fb4367c80276dfcb4a6c7a.exe.compressed
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections