Overview

overview

10

Static

static

10

e49ec0c3e3...f4.exe

windows7-x64

9

e49ec0c3e3...f4.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    e49ec0c3e36c2daf43893318262f632959aeb1616b074d0e7d904898c5f20bf4.exe.compressed

  • Size

    99KB

  • MD5

    3ae26bd31908080b0e662db534802482

  • SHA1

    001fb48c71b03274909a74e2d0013a4de10b117a

  • SHA256

    0e3d51de867eb88a0229ad877fc429a96ba6ee86c8148606f86a77c2df6cb0aa

  • SHA512

    b59a86032f62a1068a9f11d7c36dff1be179edfbed127555da581502c5644f17d1508b11c90ee761809bff3fe94fdb14bccc77373e2e80c64b65cd11064bde2b

  • SSDEEP

    1536:8Ij42aWd0ni8l4ZOtIsdm+s2sQ4yFVP8eflx69g6KWmhPK39Ijs4248YaaFQ2nDO:ZDv8QOrmj211/1flQSvJhST48

Score
10/10
upx

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • e49ec0c3e36c2daf43893318262f632959aeb1616b074d0e7d904898c5f20bf4.exe.compressed
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections