General
-
Target
e7956b4b860a59209130864dd2727b0c1eff3a28233bcccaaabb8f941dcc3125.exe.compressed
-
Size
99KB
-
MD5
4fb3a09280a200e734002ff9ed707ec4
-
SHA1
aebf906f8ec6ef637dfaf341d8bb7d0cfbfe92c6
-
SHA256
90ae37ce8595ab91c2ed4980598efccb0c6d054d6dd57a9ab30fc8cc6d7bec9c
-
SHA512
6e3ae9a5d8ff14d3bae349fa250230d6d74d615f9059d5760854ae39b9ac64653c91616925ec60157ca722264e1079a4425b26126270fd5e007f40dc0fd5e81b
-
SSDEEP
1536:rIj4aTYRX0Y9iFAK0E+4LAyKfPKHDysmOIzSw63BtuwVZY5n:SNTYRX0M/BCAyKXmczSw63zq
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
e7956b4b860a59209130864dd2727b0c1eff3a28233bcccaaabb8f941dcc3125.exe.compressed
Headers
Sections
-
out.upx
Headers
Sections