General

  • Target

    e5387562cfa397287c5fca9b7a62a36cbaf3b98a6b0ea895005cd6ec593daa70.exe

  • Size

    216KB

  • MD5

    28d294fe2a5a385810bf8a1ea003f539

  • SHA1

    b31418b05b79f2a45611d981fc5c20e5ffbf141a

  • SHA256

    eda25b705df80212ae2c0eddeb459db6f8d4030397b6697396307a4404fa78e2

  • SHA512

    ed7bee4a53833a0fd7940e74301b754f0fd213a501d37a7c74c2bde7108b1ea0c9c309e386dc723024692d43442022255faf2c297225f6c2b79e575ef2d336db

  • SSDEEP

    3072:J17DaAz38w3vE7F6PFwgBZTGFKQ+avVe+gGooSlFC2OLKKZAFEMpo4Iv1k:tb8tF6Pf2KQ+aVB2fJqh4Id

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e5387562cfa397287c5fca9b7a62a36cbaf3b98a6b0ea895005cd6ec593daa70.exe
    .exe windows:6 windows x64 arch:x64

    e368d6bc3e0ef21bbf5b85202694f447


    Headers

    Imports

    Sections