General

  • Target

    5c429fab20e166db1f5e106b94cb4861c2f8c116a82557014965de049ba35bd1.exe

  • Size

    216KB

  • MD5

    b04e2b12ed9396ea8285b56a8bef41ff

  • SHA1

    bc63795f6fc46c76f372bc2fb9fa931a655885bc

  • SHA256

    03fe06b53412285e050869154786dcdf96490a484921e5bd53c056185c7c571c

  • SHA512

    168968bc0f33af8abc96aacc24c40f345dcb820f4fd90ed05e6be0344d497ccea322e1a9b284681c102d278e98952b0c10d44b310ac7dd31e33dc82ae98f4d86

  • SSDEEP

    3072:m17DaAz38w3vO7F6PFwgBZTGFKQ+avVe+gGooSlFC2OLKKZAFEMpo4Iv1k:Gb8jF6Pf2KQ+aVB2fJqh4Id

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5c429fab20e166db1f5e106b94cb4861c2f8c116a82557014965de049ba35bd1.exe
    .exe windows:6 windows x64 arch:x64

    e368d6bc3e0ef21bbf5b85202694f447


    Headers

    Imports

    Sections