Overview

overview

10

Static

static

10

8d967c96b0...53.exe

windows7-x64

9

8d967c96b0...53.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    8d967c96b059531f87b64aaaf22ea78cab67e307769fa38c3eb450a2b5f70553.exe.compressed

  • Size

    99KB

  • MD5

    859f4cf6cb9a2bc25792ba6c519bed2b

  • SHA1

    a5c138c617255633c09e5b272795275dd65dbdbf

  • SHA256

    02f07bc7de1ad2e511aeaf2295862ead25401c4fb3014b1d2bcdaa7a9ee503a8

  • SHA512

    532abac1b5e0b02638a406348d28c2c7f50c57ca1d7f3e83a196d23a86c469f013780c485aa21fd6fdfaec153cec69961040b14cd4e6843a5276651ede16b767

  • SSDEEP

    1536:aIj4VTYRX0Y9iFAK0E+4LAyKfPKHDysmOIzSw63BtuwVZY9n:nITYRX0M/BCAyKXmczSw63zq

Score
10/10
upx

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 8d967c96b059531f87b64aaaf22ea78cab67e307769fa38c3eb450a2b5f70553.exe.compressed
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections