General

  • Target

    91ff613c7eddb4fb74412e4be00ab7803af2e8f16ab094cf9bcc99e0e0cb1b20.exe

  • Size

    216KB

  • MD5

    48afe644165c268edba7f95a0865dbc0

  • SHA1

    544e00075710117f9fe8996d09f608f602943603

  • SHA256

    c6ec19204f24a69b248495aefd3a7041bb3599eff72029bfa23dde7b44882c1f

  • SHA512

    fab0e0ded7e1fa2fd47e2283463a77fe882dd4c5c6cecced2ba6447ab83362936ffe4bb57265806f13b8cf87931100de1821a78f2be19997f04ec0bd92341fb6

  • SSDEEP

    3072:m17DaAz38w3vX7F6PFwgBZTGFKQ+avVe+gGooSlFC2OLKKZAFEMpo4Iv1k:Gb8yF6Pf2KQ+aVB2fJqh4Id

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 91ff613c7eddb4fb74412e4be00ab7803af2e8f16ab094cf9bcc99e0e0cb1b20.exe
    .exe windows:6 windows x64 arch:x64

    e368d6bc3e0ef21bbf5b85202694f447


    Headers

    Imports

    Sections