General
-
Target
a1fc0234ec780e68ef56f9536a5f85c32308e35637a1c75f1dd6af9f1355b1ac.exe.compressed
-
Size
99KB
-
MD5
ef021f54f2e71f09a806175617abcfd8
-
SHA1
e129e9184e28394560c99837f01d33806587fef8
-
SHA256
6fdcbe25367801bcc727466045e64d333d03d4cee1ab123dca02ba8efec64989
-
SHA512
280ee6fa311c4de273ca3b421363fa41ad9d0502ee435bba9ff6b1076350ba5eb76c8f322032869cd5d9414721172c23cc79dc64d6410d199db9408eed690a02
-
SSDEEP
1536:eIj49TYRX0Y9iFAK0E+4LAyKfPKHDysmOIzSw63BtuwVZY9n:DYTYRX0M/BCAyKXmczSw63zq
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
a1fc0234ec780e68ef56f9536a5f85c32308e35637a1c75f1dd6af9f1355b1ac.exe.compressed
Headers
Sections
-
out.upx
Headers
Sections