Overview

overview

10

Static

static

10

af38ed0887...cf.exe

windows7-x64

9

af38ed0887...cf.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    af38ed0887dd21b6fc1563d9f640086e9902434b50b66833136348e334cba4cf.exe.compressed

  • Size

    99KB

  • MD5

    dabe37ff7ed1e9326a038e12d03463a2

  • SHA1

    c9dabd1e0adaad4193174855cd36d5cf7508fdae

  • SHA256

    811779255cd9c96de8c81767e51498cf7de7bff7c5fc0b80edcb03aff3ab9e7b

  • SHA512

    c2b51080205c56ef5e9e9764a09be5b9f689d8b1ead16409bc8347b365074b6473f45d756049829f9ca3b82e1fef36d3b72675e0fa9688e1784b8813b84387bc

  • SSDEEP

    3072:810il4g8mVlwT9+0Eyos1qdHUY1ft0RMA:UJldlG+HlHh0

Score
10/10
upx

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • af38ed0887dd21b6fc1563d9f640086e9902434b50b66833136348e334cba4cf.exe.compressed
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections