General
-
Target
3f1ba3865d3b0af84fe02975e574c6cf6db8091115444ba3af9da90c646cf9ae.exe.compressed
-
Size
99KB
-
MD5
a059037c3af979af6cd35aaebfaa6f99
-
SHA1
1430564ecc46b389c1686795b89df231acae8c1f
-
SHA256
f5fe83733f81631e4d4bf90a096fb698a8c12497ea64c5596915c0b7a88bbda8
-
SHA512
65c5408087b3906ebc4cf650f80261c4abdde300c6bfbd5991d762606359a428e4b9853f6cb24baf0be24b9c67d914a5ccbb444cfcacac777deef22829ba2de5
-
SSDEEP
3072:th4JSuICoVLop3pYTGGcBtkowoxxnNycSi7LTl:EguYq2GGEkowCFpZfT
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
3f1ba3865d3b0af84fe02975e574c6cf6db8091115444ba3af9da90c646cf9ae.exe.compressed
Headers
Sections
-
out.upx
Headers
Sections