General
-
Target
94cde95ab95c38eecddfe2d001cae780563e91eb8ed28cf3933bef68446fe5a9.exe.compressed
-
Size
99KB
-
MD5
5ec540792f9a5585aabe7e4abc03ed47
-
SHA1
3b8310c9fa73b157e063f6d6428318023fbb7063
-
SHA256
fef9bccb37416bba5eaeda3d1e8eda876d2e847adc0ec34870aba0a500eee3f7
-
SHA512
eb43bdb30da709adea25836440e49b606c2f6e7145e5b572650118544b210caf2ab19078e2c7f00404e64fc980a67133ff6bd99510092a11527244ce1d3479b9
-
SSDEEP
1536:WIj4KNwRQM0nAK/ZEm4trpY0F88iEnpkhj6mgLa8ae1gDkL8Vfn88cn:bjJMsxEppHkhu/aeYsmh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
94cde95ab95c38eecddfe2d001cae780563e91eb8ed28cf3933bef68446fe5a9.exe.compressed
Headers
Sections
-
out.upx
Headers
Sections