General
-
Target
9f2beb8629db9e033b7a1604fe97aab51b21fc0bd627762c246ced52f1a4d721.exe.compressed
-
Size
99KB
-
MD5
28ed70e5e364a4f12d17c2c6f08010e4
-
SHA1
47facfef11d879116b34cd6911d6c8f9cbbcc697
-
SHA256
8784b6dc067dd303782ccb8781801e30e2a58f83cf99389ecdc9f3d9cb7c4c55
-
SHA512
0ba845a67cea1188046875cae66b0c2126782ef334e60e2c77b1496812630cf208d46dcba17f2a3e3853834e62d5761438690c6d71ec8c9a53374f40c65cdca2
-
SSDEEP
1536:eIj414GFLJoKTkTqRhM0rDLrLUJhF/5zGZ3eWPujplO178vTPjJ5bHYMwaq5WLn:DR0Jo8kqh2x4herb7PjjrY8
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
9f2beb8629db9e033b7a1604fe97aab51b21fc0bd627762c246ced52f1a4d721.exe.compressed
Headers
Sections
-
out.upx
Headers
Sections