General
-
Target
8d5091361064ccf9dea8a658a87f25555cce08089774b628982995218d6b081e.exe.compressed
-
Size
99KB
-
MD5
c671cc09124f5fdebd6d5ab320cb42d6
-
SHA1
a4ec9d5ad5d533618d77c01044a100477235f772
-
SHA256
6d4074b4267582300b8c157634bc1599dd7a79dd80149929cc08c08c04e6b34d
-
SHA512
4131ceb1b6ee9732bbc2aeaf87dfda198a5f58119ffbee64f88ca8d5a5f73b60fff065c1748b1247c1e6b90dd295857953a71a5d9321a9383b1a789ce79393a2
-
SSDEEP
1536:4Ij4ZMAim2szHhIv49A08qIPPgBvlmYkw7OOlhIWGYkb+EC3LZ9m7nDofS9Z1Gn:NsvimVzHCfqL1l57hsvYkyEooDgS
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
8d5091361064ccf9dea8a658a87f25555cce08089774b628982995218d6b081e.exe.compressed
Headers
Sections
-
out.upx
Headers
Sections