General

  • Target

    2024-01-30_dde253fbf823011af1961649e16e218c_babuk_destroyer

  • Size

    79KB

  • MD5

    dde253fbf823011af1961649e16e218c

  • SHA1

    a725eac8b1e7487078dd79bac03b635fb658a511

  • SHA256

    ff78e9706891818a3db5ef3f46f107250f59bff43276d72e77eb4ec9d26e0e66

  • SHA512

    27f50866d9bd67b5859d0d7589a996b0ef0d131dea54b62d4e34c71200751739cba64257fe4cdc15ca86f52e3e017172b95b3290a1b6b76cb38c7ee46e5f9b77

  • SSDEEP

    1536:UmkWBeG/vEbmsrQLOJgY8ZZP8LHD4XWaNH71dLdG1iiFM2iG2nsf:HBeQsmsrQLOJgY8Zp8LHD4XWaNH71dLc

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-30_dde253fbf823011af1961649e16e218c_babuk_destroyer
    .exe windows:6 windows x86 arch:x86

    202fa14f574c71c2f95878e40a79322d


    Headers

    Imports

    Sections