General

  • Target

    a1fc0234ec780e68ef56f9536a5f85c32308e35637a1c75f1dd6af9f1355b1ac.exe

  • Size

    216KB

  • MD5

    d42b3130db04b62a68c13516980f22ad

  • SHA1

    c115334d27cedac85d0b02e2dccf1598e8a257e6

  • SHA256

    d5e4f2770d71ec581f569c4b7e78fd84e30fed82eaf7775a029e39a5470708d5

  • SHA512

    0e67e45978c4e3c6c026282796896d239c64266226fbc51e8e7384a94983eafb4e70843141f6dbbc497970b402ae827529718ea8619b7940f6a71fda7ae6abb5

  • SSDEEP

    3072:m17DaAz38w3vi7F6PFwgBZTGFKQ+avVe+gGooSlFC2OLKKZAFEMpo4Iv1k:Gb8XF6Pf2KQ+aVB2fJqh4Id

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a1fc0234ec780e68ef56f9536a5f85c32308e35637a1c75f1dd6af9f1355b1ac.exe
    .exe windows:6 windows x64 arch:x64

    e368d6bc3e0ef21bbf5b85202694f447


    Headers

    Imports

    Sections