General

  • Target

    413c0d4f44818df2d1274c93086887ea80092738706070be40033b9710c401ea.exe

  • Size

    216KB

  • MD5

    20e5e686055c32e729ed0881a9a5e244

  • SHA1

    7e8ed1ff576713bb30b59766a6153881b208546e

  • SHA256

    d4e8144d25eb57fc421768937abe088700e49d11bf9642b6b8e331c11a20577e

  • SHA512

    d77e9edf812b97d156d41a89a955d9cfd979820dcd71c165f9187d86de6616c3424c5434dc282beac047758f18ac18f61677f870ac5e7bf0eb3c795c0b4820e7

  • SSDEEP

    3072:m17DaAz38w3vl7F6PFwgBZTGFKQ+avVe+gGooSlFC2OLKKZAFEMpo4Iv1k:Gb8UF6Pf2KQ+aVB2fJqh4Id

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 413c0d4f44818df2d1274c93086887ea80092738706070be40033b9710c401ea.exe
    .exe windows:6 windows x64 arch:x64

    e368d6bc3e0ef21bbf5b85202694f447


    Headers

    Imports

    Sections