General
-
Target
86a8d1eb23321c4e72a68071514e0486fa70009e98a5f0c7ee3cfe447ed198d2.exe.compressed
-
Size
99KB
-
MD5
f9709ef6e9b3707641d20f7616a500c9
-
SHA1
45ba437ad81bd850ae7c511794ae99ef56ceb7f8
-
SHA256
f23b07539bdcb27fce6cdfb8dc74aa99bfaf641ac82e575e464d4e7f100b978d
-
SHA512
4badab1677ef7c69fec9e5ea3fcb569f3f5c8d5527cfd4b67b0168cf3377866fa0a7ec87d87f16b444c5d517d74c5835a9801c3d99923123a65d65f726d122b3
-
SSDEEP
3072:m4iJSuICoVLop3pYTGGcBtkowoxxnNycSi7LTl:MguYq2GGEkowCFpZfT
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
86a8d1eb23321c4e72a68071514e0486fa70009e98a5f0c7ee3cfe447ed198d2.exe.compressed
Headers
Sections
-
out.upx
Headers
Sections