Overview

overview

10

Static

static

10

8986bbad05...5a.exe

windows7-x64

9

8986bbad05...5a.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    8986bbad05b0d3b443d0ef60cd67b51dd38641106cc13b3f996a88971710325a.exe.compressed

  • Size

    99KB

  • MD5

    40d37d5e24eebf3b9670874cecbef823

  • SHA1

    3d6a983e24d93f0c1ef1a5bd35cc82c0d4b73a2e

  • SHA256

    4b5a851db9389e2c176c1bff112be7e799e5b2ec67a8c196c3ec982798cf6456

  • SHA512

    44a16782e38fa82a1d00dd5a4bae76f23fedb726099b4e4decceefdaa5121bb21ab935993b9228d15b4ce11cd620274b64d84ee97f262e0b1dd24b17a1d43987

  • SSDEEP

    3072:3kiMcc6VP5Tjs6NazfjtG7lycCsmC5fOtk:U2ccnrNazfhG7lycCcBOt

Score
10/10
upx

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 8986bbad05b0d3b443d0ef60cd67b51dd38641106cc13b3f996a88971710325a.exe.compressed
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections