General
-
Target
afda37c82208a44ebd34730de48b316e3ff4b43db1afe5d16fda2a6b15a9caa9.exe.compressed
-
Size
99KB
-
MD5
0ff84c144e5b46c9f7073b031f1c72ba
-
SHA1
54dbc69da146bd156f638ce888ab5ec0f6ad5f51
-
SHA256
7c734cc2b2369068f9d9a8d358ea3196c377d7b1a7bd3ae6765fec8c08293dba
-
SHA512
3bd15984622de375de844f6f9de034306171a68bfa89f4f3dbe102d284457d32dd349f048071021cd6b40d494a863a7e659659380cc45dacf8e4e02da24d5edc
-
SSDEEP
1536:JIj4kYfu+snbiqBKVkcH2/W3KSjY3rIjXFh5aYqBiQnecwIcx5Boe5fhRn:42qbWB3KSjiI/MBtUxNhh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
afda37c82208a44ebd34730de48b316e3ff4b43db1afe5d16fda2a6b15a9caa9.exe.compressed
Headers
Sections
-
out.upx
Headers
Sections