General
-
Target
e94467b13bc08c21a7680c97210d8eb24ecabffcfd7b032b737e70e2a52daa2b.exe.compressed
-
Size
99KB
-
MD5
bdf0ed8866eda7903d61b7166cdbabd8
-
SHA1
2f334befab909a368f36698e07c76c747102063c
-
SHA256
55f8500033f539638040dc1294aae40451c4b4135b18af7714e56bb60a296989
-
SHA512
667119f2a247ee74368ae4406b4419c1fcbb91acfd8273b6d24fc00d29188be7b8860d2507456cc0b6ed5cf4f39b872b178f8bd0e615b58d85458bcf1c7b8350
-
SSDEEP
1536:RIj4qMAim2szHhIv49A08qIPPgBvlmYkw7OOlhIWGYkb+EC3LZ9m7nDofS9Z1Gn:gXvimVzHCfqL1l57hsvYkyEooDgS
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
e94467b13bc08c21a7680c97210d8eb24ecabffcfd7b032b737e70e2a52daa2b.exe.compressed
Headers
Sections
-
out.upx
Headers
Sections