General

  • Target

    0a9a6133d635d5ff9d150c6fbf72eb92a89e048dc82cb5c2f9cb128939474c2d.exe

  • Size

    216KB

  • MD5

    1fad622422f6f96e75d402900d4f91ae

  • SHA1

    56ca2ab20997ff66c14b6e1ee4ff689d791e9da4

  • SHA256

    97ee466a6770c1722b81d5c8174451d10bbacd8530e436daf242fe0b1d781d00

  • SHA512

    67f52acda19495bf1aa7a668c07315a78d11982c38e0eee389309e3eb749434cf4f193e23f9f8fb508222f251ba045879ad006c3543aeb8461686e74062a825e

  • SSDEEP

    3072:m17DaAz38w3vY7F6PFwgBZTGFKQ+avVe+gGooSlFC2OLKKZAFEMpo4Iv1k:Gb8BF6Pf2KQ+aVB2fJqh4Id

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0a9a6133d635d5ff9d150c6fbf72eb92a89e048dc82cb5c2f9cb128939474c2d.exe
    .exe windows:6 windows x64 arch:x64

    e368d6bc3e0ef21bbf5b85202694f447


    Headers

    Imports

    Sections