Overview

overview

10

Static

static

10

0fdaefba0f...a0.exe

windows7-x64

9

0fdaefba0f...a0.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    0fdaefba0ffaa140e1da606bc48902c200708445da3e8966a976a69d4dd327a0.exe.compressed

  • Size

    99KB

  • MD5

    c646b90e5c77dad8164df9ca0257612e

  • SHA1

    887416c3fbd7c17eeaac4427cb3e73c24cff8d62

  • SHA256

    0c50f6647815a03dfa5f6a566db5de95df0e46eb5ffb072da4c1eb80c5b5c693

  • SHA512

    e83d33b6315f4eeb7decffa713e14ed426ee9da0500ec3f422a3f984a755dd89093d446fc75f8d923c968ea6c8ebe30aa9bb3f1aa1cb86c18166a493fae13101

  • SSDEEP

    1536:aIj4o0ZJL9Q1oFsIOsadJ6FqGuHxljbtP2zJzQKJKnXYgPiGeQiZ0Qn:nn0ZTzF/YbCJQBXYgaG

Score
10/10
upx

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0fdaefba0ffaa140e1da606bc48902c200708445da3e8966a976a69d4dd327a0.exe.compressed
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections