General

  • Target

    6399819a1c9b91bf91cf051c3b48feefbec7be70d850d3895ec38ae9e018293e.exe

  • Size

    216KB

  • MD5

    ef2971f89d23360a36d6a0916da84277

  • SHA1

    0a025167eb96f03fff88865380b0175a8fdee878

  • SHA256

    f886106eaa63d50bc27f2fec895e6ab73af0b1c42f30e3b7ec3cb020707cd6f5

  • SHA512

    67b52204c59d8891a0b10e4c558c39cdcef64d975b58860d9a33245baf789ed2e06122e332a99e38dd4fa3dddac38bd1abd4a666df7ed84804a96e1e8cda00c9

  • SSDEEP

    3072:m17DaAz38w3vZ7F6PFwgBZTGFKQ+avVe+gGooSlFC2OLKKZAFEMpo4Iv1k:Gb8YF6Pf2KQ+aVB2fJqh4Id

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6399819a1c9b91bf91cf051c3b48feefbec7be70d850d3895ec38ae9e018293e.exe
    .exe windows:6 windows x64 arch:x64

    e368d6bc3e0ef21bbf5b85202694f447


    Headers

    Imports

    Sections