General
-
Target
63bd0665ac1a50cbca110a109d47cd042adddaa847024bbcf6a2d01727ace761.exe.compressed
-
Size
99KB
-
MD5
7f45f157748b76f78654b39066d68a94
-
SHA1
061ebd379346d31ebfb7b905704b942e2f6f2675
-
SHA256
16992f75de004a6400da4b04e8e70b608ffc6ca6f1da44f803a659516db22a8a
-
SHA512
8fc49d116799531bc831a24044016726d970b1b1a98a33d5ff371b0974a7bd2d162d131bf1ec8203febc316119ce82322b7706e0ad30e3682120004beb9e9cb1
-
SSDEEP
3072:LRiJSuICoVLop3pYTGGcBtkowoxxnNycSi7LTl:sguYq2GGEkowCFpZfT
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
63bd0665ac1a50cbca110a109d47cd042adddaa847024bbcf6a2d01727ace761.exe.compressed
Headers
Sections
-
out.upx
Headers
Sections