General
-
Target
3e316a49a0d359f9102c9af1aeac5c0816c7602fc3f69aca425733c67a78358a.exe.compressed
-
Size
99KB
-
MD5
df2f9b8fc9b9994493c6ce5642625c1c
-
SHA1
39a123521403527b7f8d939174e2f9afe7b3168a
-
SHA256
d85c933bb771f285c1b64271298502661f22ec6c8150c541ab8627d76a90598b
-
SHA512
07a833d63a7f51c6246e635b90538c0899087989cefad7eac57a5bc6436818ccb3bd4daaf1a018d65ec7bc833ea2583b7c1ce2dedddf0f66091df72372729ffc
-
SSDEEP
1536:cIj4OMkYfu+snbiqBKVkcH2/W3KSjY3rIjXFh5aYqBiQnecwIcx5Boe5fhln:51M1qbWB3KSjiI/MBtUxNhh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
3e316a49a0d359f9102c9af1aeac5c0816c7602fc3f69aca425733c67a78358a.exe.compressed
Headers
Sections
-
out.upx
Headers
Sections