General
-
Target
0dfb59e06ef8ee8f0e59486c3ce18e37b328f6279f26aca0935ff9ecc28a6994.exe.compressed
-
Size
99KB
-
MD5
4893876e22b3df6b5f8695bc0c2beead
-
SHA1
89a03cd4b4c31b9a3c4b3a5def467b05985f944a
-
SHA256
1991b4a711781f441daec17187d67aec9105ccd2170cc0451dd470cdc9cc8827
-
SHA512
b243178e919a4ebeb69f3f582c1ac1a06ffcd731568769c94651973598323932e55c68fca91e9c252cbecfd32e9ab7c0f88f4f733275b332fef7bbbca9cde5b6
-
SSDEEP
3072:du9omcf9qy10Ve79MJAqLg39Xs/6zMQKE/O:EKmi11f79MJAqsNXNzMQKQO
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
0dfb59e06ef8ee8f0e59486c3ce18e37b328f6279f26aca0935ff9ecc28a6994.exe.compressed
Headers
Sections
-
out.upx
Headers
Sections