General

  • Target

    aaf191270b2d4232700ec46ea63f8545a4bb71a30d2d02ea6400866e79a821cf.exe

  • Size

    216KB

  • MD5

    709638d6e3b3c72c05e543677287864b

  • SHA1

    9a88d3ec2d07810fe863eb702cd9cb9319f8875a

  • SHA256

    d1896d4be8b27cca2a84128d154ff5c74665d1148e7ee7a7dfca54a16cb75f4b

  • SHA512

    bd299354250517c34fc799e734eaf7311d23c4db04adb154893f79e0e354c378493311846ad337f1bac5944b6c8e298984b77d330a0bd7fee1087737fb0e2a91

  • SSDEEP

    3072:m17DaAz38w3vZ7F6PFwgBZTGFKQ+avVe+gGooSlFC2OLKKZAFEMpo4Iv1k:Gb8oF6Pf2KQ+aVB2fJqh4Id

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aaf191270b2d4232700ec46ea63f8545a4bb71a30d2d02ea6400866e79a821cf.exe
    .exe windows:6 windows x64 arch:x64

    e368d6bc3e0ef21bbf5b85202694f447


    Headers

    Imports

    Sections