General
-
Target
ac9d7415539139e3ebd2e253ed376a8f8b8262f96efda07a8008804bf49e3f87.exe.compressed
-
Size
99KB
-
MD5
658d743cbd753618538f0ac615411606
-
SHA1
819a52af8d69b2bad468ad4375fc97acfb7aac7f
-
SHA256
9aa5fd0635effedbf0508c8f4b587a44b4edb67940280a8bb7b22d99165ce02e
-
SHA512
914343ae6bdba41e4b471aeb59df91f276a27e61ed5367ec21470a08ab1714b6ea8ab0d3e811939af50bcfcd1c04e1126ad2740bdd692ed26abcd8ba3c890917
-
SSDEEP
1536:lIj4CyUN3HZUR5WnPszr0MBEJVLcZL82ZTBv2caHwaCB284O+6n:MiUJHZU5WPLMBEJlcGE7aHwa
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
ac9d7415539139e3ebd2e253ed376a8f8b8262f96efda07a8008804bf49e3f87.exe.compressed
Headers
Sections
-
out.upx
Headers
Sections