General
-
Target
6436673c0c4465a2620a464f2130257bf434e332ad05f2afb11f064cd9d14b25.exe.compressed
-
Size
99KB
-
MD5
d3d3773b2b7f05a82b8ab90849e17f9a
-
SHA1
780c281b858488be85aa51efab7d35c67a44820e
-
SHA256
14c727b2459c4b0fa24dde95f1cfc7833f0a9df18a345343514a8a4dd168d62f
-
SHA512
d59d215bd9cdfa1c039ed92d3ed73c791beaf17facd518aa6ccb6cb5347a80d5bfb44a4d08a0501854753e8a76f9fb94ab144fa16d91b28c53170e4708166015
-
SSDEEP
1536:OIj4hF++QyL2iQfxIrWgC8dyy5qIDcE7o1w2aauag7dnpc2L1dYRJv89YUguTM6n:ziVaiQ8VX/cE7EoZFFLPu6Fg
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
6436673c0c4465a2620a464f2130257bf434e332ad05f2afb11f064cd9d14b25.exe.compressed
Headers
Sections
-
out.upx
Headers
Sections