General
-
Target
72f41584ce3e345b93bca3f8ca305ebebebde9011c2d02fb4095c7805fd99730.exe.compressed
-
Size
99KB
-
MD5
358158c2b568a6cc33c2766fb1454458
-
SHA1
602a5876900d69b64740085d7023852b1fe2a540
-
SHA256
cbace75dd37130994a603c89de0b8cad706c34f9fe3dc5497038c7517e613a5d
-
SHA512
db4fd9a85c79a98c3a216fa1ffb7ee8eb909aec9adcc7d4493efd1fd0a3761e8cc7ae559e1822e2aad59e71ca6bc7150b4043b79ddb33f51bea38f7e00d88848
-
SSDEEP
1536:6Ij4Mo5BxJpVikqs8UVWXsc2VJVxsjlP+A2sEUR9ntv1WhdQKZen:HGXlFWXjQJVGjlX2UR9tkU
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
72f41584ce3e345b93bca3f8ca305ebebebde9011c2d02fb4095c7805fd99730.exe.compressed
Headers
Sections
-
out.upx
Headers
Sections