General
-
Target
6132309eca997fa20b3cba27778d616d5965d867789fc2026ec269167e70f0a2
-
Size
99KB
-
MD5
c4b65dd1731e2ef69168f44b87918f1a
-
SHA1
aa11fe1289f679526e44f58ce2fb500c7bed6a5b
-
SHA256
9a34972126152cc178418482f18dd8003dec167a395453ce2b4d1380f76df152
-
SHA512
e35140944d222a310d734a9d46355e22a7b12a51cdfbd0d09edc6acaf125eb4f10b0c52ba72b8a5159e0ca9ba3279c4276f5d04556882039e3234d5e18840e68
-
SSDEEP
3072:sFtaohgelT+4x6oyZ8f85Uc+CfAuC5Es71lhF:LR8hfM086y+Es7
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
6132309eca997fa20b3cba27778d616d5965d867789fc2026ec269167e70f0a2
Headers
Sections
-
out.upx
Headers
Sections