General
-
Target
8a6ed2353ffa66a7fe1a7bfe57c044bd9604c1e69b5da216b15cf86d64c0e6ad.exe.compressed
-
Size
99KB
-
MD5
78b9f86f1637a72bdc18b5f151f74348
-
SHA1
2de34d0331e026d72875eb89e2198029c05f5f27
-
SHA256
816d27696e114e6ad0f5dd4f55e9258862b03980350882dc0f908c0b031267fb
-
SHA512
8258e21139201a2080b1ccdbe902941c53e182bccab76a585f19ba31644ee181c1ff97a17c7ec3aa94ff187c44525510f588c8a4b673993646abe551c547345e
-
SSDEEP
3072:eP9omcf9qy10Ve79MJAqLg39Xs/6zMQKE/O:QKmi11f79MJAqsNXNzMQKQO
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
8a6ed2353ffa66a7fe1a7bfe57c044bd9604c1e69b5da216b15cf86d64c0e6ad.exe.compressed
Headers
Sections
-
out.upx
Headers
Sections