General
-
Target
af07208642302187ca429dcb18ac5944b4b55f23d0cd5213b0b3cddad5cfce00.exe.compressed
-
Size
99KB
-
MD5
6dded44bd27b96e8e4ce382515e3a310
-
SHA1
91320a3898f8db46f7e034c0f3e409df94243277
-
SHA256
2c4cefea16406b40d777d88b9e16ec99bdfd01fe7460d1fa108bed7e51f86e23
-
SHA512
048f82768ff2b9da245f9134ec0d27c852dd4e7a41565c2a1b2cd782f9321c3307bd2153b96eab09bb788a1624ac3133fdbe0ae72f088f80c8e7f19532d300d2
-
SSDEEP
3072:3xgataohgelT+4x6oyZ8f85Uc+CfAuC5Es71lhF:hghR8hfM086y+Es7
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
af07208642302187ca429dcb18ac5944b4b55f23d0cd5213b0b3cddad5cfce00.exe.compressed
Headers
Sections
-
out.upx
Headers
Sections