General
-
Target
8861fa49f7296e4abfa69b4a743298d41bde7ebf92a01a2fa8ffabeebaaed4c1.exe.compressed
-
Size
99KB
-
MD5
7b76633388fdbc9721fbaa411da2f4e7
-
SHA1
1308846e7d120d36e3330d883343284d9a835271
-
SHA256
b5ad98d1e41978582b58d54bd64861a635c015d0907c66fd428c743285b8479f
-
SHA512
5cc1a27a0682084a537586bbce0b026ea26e59b8a92718c8fc3411485676d325aee37991d6757046c7438d670a5e3822fd74748d2da6a80083ed1c96a1be7112
-
SSDEEP
1536:mIj4GTYRX0Y9iFAK0E+4LAyKfPKHDysmOIzSw63BtuwVZY5n:rhTYRX0M/BCAyKXmczSw63zq
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
8861fa49f7296e4abfa69b4a743298d41bde7ebf92a01a2fa8ffabeebaaed4c1.exe.compressed
Headers
Sections
-
out.upx
Headers
Sections