Overview

overview

10

Static

static

10

d6c6f1d788...a9.exe

windows7-x64

9

d6c6f1d788...a9.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    d6c6f1d78803d14eca64a15581efc436d16420b8798dc07f8cc86fd74671e6a9.exe.compressed

  • Size

    99KB

  • MD5

    907bb7d1c1994bc6ce3b8dbd3806f172

  • SHA1

    332f22e3db786e9243f58b7105b5e131ede10c55

  • SHA256

    d80a0e5524da856bf6fae2f1c04e93dcd0b6ffbea57f4c417416c6e7e8b44a39

  • SHA512

    951b32285f8ad530fa5372b9bb6dabbd9d69e397be8bf2b01acb149c054717946623fefb08c266cdda35350fe9952e66bb3a8b1f0e83c890ee4e6ec29706ad7e

  • SSDEEP

    1536:sIj429sNwRQM0nAK/ZEm4trpY0F88iEnpkhj6mgLa8ae1gDkL8Vfn88En:J79sJMsxEppHkhu/aeYsmh

Score
10/10
upx

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d6c6f1d78803d14eca64a15581efc436d16420b8798dc07f8cc86fd74671e6a9.exe.compressed
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections