General
-
Target
72f65174e29b97ca28b0d91a392cea634e19b1fd01365700ffcea5b2569909d6.exe.compressed
-
Size
99KB
-
MD5
5d52a170b330499391774fdbd1bad007
-
SHA1
ff3d5077f86e560aac12c9a5560008262632d571
-
SHA256
684e4a6e6a74f626817453e7f1bbb4b2c974cb1f00751bc05b8e81faf9ac520b
-
SHA512
d0997d7b54a75c6b509639df4cb9660ccf733a999a14ff8007fdc04a0f2d92a6059abc08bf9067de95c96b3cab8d47b1f1274cb81e047e365b21466911421ca6
-
SSDEEP
1536:tIj4hyUN3HZUR5WnPszr0MBEJVLcZL82ZTBv2caHwaCB284O+Un:UJUJHZU5WPLMBEJlcGE7aHwa
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
72f65174e29b97ca28b0d91a392cea634e19b1fd01365700ffcea5b2569909d6.exe.compressed
Headers
Sections
-
out.upx
Headers
Sections