General

  • Target

    af38ed0887dd21b6fc1563d9f640086e9902434b50b66833136348e334cba4cf.exe

  • Size

    216KB

  • MD5

    3b957a9f74d88a952a5b5bb187e012bb

  • SHA1

    7d3a1d8a9b61eb9a93ad8b32f90db48f05e1e168

  • SHA256

    022dee1625c30fc17cfc0be7681c1866968c07378d14426da47e641caacdf00d

  • SHA512

    401cd8b27d1196fbb9ffd4082219f2c8eda07864e67be3c8d3c5e7bbc40c622797314d0d3ed4be9d185b5ed8e6a48b951c66ea08e9718e12b3cf9dba6f9aa574

  • SSDEEP

    3072:m17DaAz38w3vM7F6PFwgBZTGFKQ+avVe+gGooSlFC2OLKKZAFEMpo4Iv1k:Gb8FF6Pf2KQ+aVB2fJqh4Id

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • af38ed0887dd21b6fc1563d9f640086e9902434b50b66833136348e334cba4cf.exe
    .exe windows:6 windows x64 arch:x64

    e368d6bc3e0ef21bbf5b85202694f447


    Headers

    Imports

    Sections