Overview

overview

10

Static

static

10

e07d8dbc17...6a.exe

windows7-x64

9

e07d8dbc17...6a.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    e07d8dbc1778b89291618dd438ab24d7b30dd774a87344b23a34aeb7eb63206a.exe.compressed

  • Size

    99KB

  • MD5

    282c1b41953eb7396247e5c1f1dbbf36

  • SHA1

    393cc15ad25edadbc44f45bcae497c85b852cea2

  • SHA256

    f68af5632917f0ae0bdb7fed747a34a0a731930f86fb80c5fc1164e208f7d53a

  • SHA512

    893b51cc9535e4727d796ea753c267fe2d44cc2a4bdc5174c51cc6e7b209d0e1a6615d6861b026c419911f10cd51fdd1f8d3b6e577b68bdfc8ffb87b5ea39960

  • SSDEEP

    1536:qIj4UUC6XEL1h8vJPW80Z/mS0ZTEk2PNzBTvLFKb1sWDYwN1UA6hA37n:3Ma1iQMTEk2PNzOsnwd6hA

Score
10/10
upx

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • e07d8dbc1778b89291618dd438ab24d7b30dd774a87344b23a34aeb7eb63206a.exe.compressed
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections