General

  • Target

    7c87bd544597999c673aaac60d9036dbf5239459aaaa4a15fec1dfc693f1286d.exe.compressed

  • Size

    99KB

  • MD5

    7e60796429ee59b4ed4c8126490a4108

  • SHA1

    0b36dc470c7e0d4dd076ddaad2fcd90d9bd44c33

  • SHA256

    a234b6a6ba9853a0225130abee6d23d740eef2fc2296d6eff57540c376ce63f1

  • SHA512

    2f2a6a78dd59744f7972d4e56b02014716683bc89a996bc4dd703ada2daca429bcfeb9712442977f0895a73721a80feb85d3107ae3d5e912400597d217d623db

  • SSDEEP

    3072:p/iJSuICoVLop3pYTGGcBtkowoxxnNycSi7LTl:oguYq2GGEkowCFpZfT

Score
10/10
upx

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 7c87bd544597999c673aaac60d9036dbf5239459aaaa4a15fec1dfc693f1286d.exe.compressed
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections