Overview

overview

10

Static

static

10

81b31c06a4...b8.exe

windows7-x64

9

81b31c06a4...b8.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    81b31c06a4c91c95d9347632a074ce42b44042427c874fac2f83511868cd19b8.exe.compressed

  • Size

    99KB

  • MD5

    decf7415d92fe5fa79bc82db4989964a

  • SHA1

    321cfe8247b45559588f1c85f22c722d78cf5d22

  • SHA256

    ebd31a15f7ec6b66683b2dcba7445cefb809a86f891d7cca4a539ccd164541d6

  • SHA512

    4ed54ff04eca23902f4f6fd9272f4a06bee5fc2df2873fe8dceaa3f6fb46819243943681a9c7845d48fefba00fe3b3dfc50d4d4038d1a7851109ae4b023a3a80

  • SSDEEP

    1536:dIj4U6MAim2szHhIv49A08qIPPgBvlmYkw7OOlhIWGYkb+EC3LZ9m7nDofS9Z1gn:EcvimVzHCfqL1l57hsvYkyEooDgS

Score
10/10
upx

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 81b31c06a4c91c95d9347632a074ce42b44042427c874fac2f83511868cd19b8.exe.compressed
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections