General
-
Target
a9ceb2f4884034582d397f6adcbccc2cfb8c6f978d3852ceb8a69e5562b0885d.exe.compressed
-
Size
99KB
-
MD5
4e97d1a112d2227c672eee6c5626902a
-
SHA1
ff2a694a5641202884eca5e6aac9110dd4ce1817
-
SHA256
56f0bdf35cddc20d7453bc48ed925a53078362924de1d02bbed0a2629ffb0cf7
-
SHA512
cce01cddaabcfd6e88e7fe862e24a3f40e2c10f20ee91884f35f07650451dbd0bb5073350e67684c83ba88e9f0a74dfcda68bf73dfca3e1bf69fea27f8578e95
-
SSDEEP
1536:qIj4Obo5BxJpVikqs8UVWXsc2VJVxsjlP+A2sEUR9ntv1WhdQKZ2n:3R+XlFWXjQJVGjlX2UR9tkU
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
a9ceb2f4884034582d397f6adcbccc2cfb8c6f978d3852ceb8a69e5562b0885d.exe.compressed
Headers
Sections
-
out.upx
Headers
Sections