General

  • Target

    8861fa49f7296e4abfa69b4a743298d41bde7ebf92a01a2fa8ffabeebaaed4c1.exe

  • Size

    216KB

  • MD5

    0a56af0446a26b420db517218276c155

  • SHA1

    393beafff21df8aa9ac92357dd19f353e9eff944

  • SHA256

    07a1ea2f002cdf23a37bcb3b33c8577c1cdc5be25dc394515242baffdc43f491

  • SHA512

    b0b630877dfade241b3dbfacbd3997a60d880cf690dae0585b3622d07237f7b0a6fe02274d0662aa11e8bd6077c738321e5694299f3a0d6672efadba89ffa9a1

  • SSDEEP

    3072:m17DaAz38w3v27F6PFwgBZTGFKQ+avVe+gGooSlFC2OLKKZAFEMpo4Iv1k:Gb8bF6Pf2KQ+aVB2fJqh4Id

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8861fa49f7296e4abfa69b4a743298d41bde7ebf92a01a2fa8ffabeebaaed4c1.exe
    .exe windows:6 windows x64 arch:x64

    e368d6bc3e0ef21bbf5b85202694f447


    Headers

    Imports

    Sections