General
-
Target
43b59ccecbed5f0c28ce244cdd42437418581615eafa53591486b77441151a79.exe.compressed
-
Size
99KB
-
MD5
8a22061f5251bf207a821c143a3500aa
-
SHA1
3cbf42495354948519c671f261139e2b56049c39
-
SHA256
458156f019fcb3c22a1246d05a805997957e104d1616c92656dc8a66023cd87e
-
SHA512
5e5bd70c0da1a0c55aab9012d6952b120df094335337068bd0da7854061a184526a7369dbb1414ca67c727783c2f7c4abd7df175dd3939a8e880dd9c0000b8bd
-
SSDEEP
1536:RIj4/g5EIim2szHhIv49A08qIPPgBvlmYkw7OOlhIWGYkb+EC3LZ9m7nDofS9Z1W:gCg5EIimVzHCfqL1l57hsvYkyEooDgS
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
43b59ccecbed5f0c28ce244cdd42437418581615eafa53591486b77441151a79.exe.compressed
Headers
Sections
-
out.upx
Headers
Sections