General

  • Target

    618a69a2fbb50ad32fa37504fb3bf3c78ebf35dbeab4df1f6c9278eb105717d9.exe

  • Size

    216KB

  • MD5

    906a48919de605da48078ee452300636

  • SHA1

    cc5cfb10f7412960d95b8dcd474d63008c593531

  • SHA256

    7934bdc950d88267c20e583692152408c5e911b0ea10dc2d2f2b36713e8e6cd9

  • SHA512

    7fe1fc277fbbc9df4364af82d7aca29f72a12b505aabe03dd37f4e90e8a8dc425a7e7bf3398122b9b94bb929c9be59abdb231bbb3512e5a12e248a1c8f12163e

  • SSDEEP

    3072:m17DaAz38w3vI7F6PFwgBZTGFKQ+avVe+gGooSlFC2OLKKZAFEMpo4Iv1k:Gb8RF6Pf2KQ+aVB2fJqh4Id

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 618a69a2fbb50ad32fa37504fb3bf3c78ebf35dbeab4df1f6c9278eb105717d9.exe
    .exe windows:6 windows x64 arch:x64

    e368d6bc3e0ef21bbf5b85202694f447


    Headers

    Imports

    Sections