General
-
Target
a3ebea943aa035e09cd8b36f20df72a9849471b2d5393e2a3d8b0a8c117ca775.exe.compressed
-
Size
99KB
-
MD5
4ab6f4b33be48b588567f4836ca5275a
-
SHA1
bc8ee5703ca0ae460d72305436302cc398b7cef4
-
SHA256
39009dc4adcc0e6bdf0d12eea5eeb2cacd1925f49910fec225319557b81579a7
-
SHA512
993c34268179c04c102b2ee63eef01c888f552125900e2e08df28300fe028f29d7db77d1d610d85cce411ce49ee450716a9c4c188bcc2d71a654de5ff989f6c2
-
SSDEEP
3072:aDHil4g8mVlwT9+0Eyos1qdHUY1ft0RMA:WCldlG+HlHh0
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
a3ebea943aa035e09cd8b36f20df72a9849471b2d5393e2a3d8b0a8c117ca775.exe.compressed
Headers
Sections
-
out.upx
Headers
Sections