General
-
Target
09fe5cca5a3692222eb7e69bf9fb28ef12dae099a66d5fd6dc20aa7c9c19b7c8.exe.compressed
-
Size
99KB
-
MD5
03eafbf17d6c7b58ba25db5bf0c78029
-
SHA1
4dcdddbc0b156980a127346289559fbaa0aeadb7
-
SHA256
8303bfc870d8b652fc4648f351e3f0c73223eb16e4cbae09b638a5f026dd4d47
-
SHA512
c01378fc79ed0c680c035dad55aa3d0502e551c451c71ace1d6daeb2623421e41895328cc701b49f6e383c1784e5124213b5e37ca2cc77737f5d7da6a3da1760
-
SSDEEP
1536:fIj46Ry5MAG/ePWiwEqYr1xJdLKjyxDJ9DlKvebLKvCiMHrn:epifxrHb1J9Z9bcCiY
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
09fe5cca5a3692222eb7e69bf9fb28ef12dae099a66d5fd6dc20aa7c9c19b7c8.exe.compressed
Headers
Sections
-
out.upx
Headers
Sections