General

  • Target

    8a6ed2353ffa66a7fe1a7bfe57c044bd9604c1e69b5da216b15cf86d64c0e6ad.exe

  • Size

    216KB

  • MD5

    cb65df94f35892a253647f6f47cc84f5

  • SHA1

    a67dc6e6d7662e9ee71217e88af40897a1af66a3

  • SHA256

    fd665b23b2097b169ef119b402fa74089f6f2d402ee1099ef6e1fb4ab42b194b

  • SHA512

    25b2e2e6dd23704b378ece501f887d37ab42bd0ac66f78ec1346e110671bf0cae2a852737025be6e102b640647701a0c102d8f26384e3ef08f4572465bdeaa17

  • SSDEEP

    3072:m17DaAz38w3vv7F6PFwgBZTGFKQ+avVe+gGooSlFC2OLKKZAFEMpo4Iv1k:Gb8KF6Pf2KQ+aVB2fJqh4Id

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8a6ed2353ffa66a7fe1a7bfe57c044bd9604c1e69b5da216b15cf86d64c0e6ad.exe
    .exe windows:6 windows x64 arch:x64

    e368d6bc3e0ef21bbf5b85202694f447


    Headers

    Imports

    Sections