General
-
Target
e23425a9b5b6030521945841944ccfef938424a639851ec6fea9f16619d5e20f.exe.compressed
-
Size
99KB
-
MD5
75c4d0f77be18580d580abca61289e50
-
SHA1
7b502e94c0f47a3d19c65b41634dfbb1a4e8ce28
-
SHA256
63bc98cc8f4bd19fe3e1ca008874b9883b72d8a46148271f826c9fa745f67017
-
SHA512
4ee57d02d54e59426c7e4bcadf741755f4d1fd47b4f654d939f2b56702983e8341a73bda97fb3056e734abde603b3275859ea1152d412657ce58da5affcf3b65
-
SSDEEP
1536:8Ij4N++QyL2iQfxIrWgC8dyy5qIDcE7o1w2aauag7dnpc2L1dYRJv89YUguTMan:Z4VaiQ8VX/cE7EoZFFLPu6Fg
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
e23425a9b5b6030521945841944ccfef938424a639851ec6fea9f16619d5e20f.exe.compressed
Headers
Sections
-
out.upx
Headers
Sections