General
-
Target
84a12b237c8acc8fc9008da6c48f9a2dffd9feaa2f283968d420250235e2fb34
-
Size
99KB
-
MD5
bea647bc314248d390f14df1aad251b0
-
SHA1
27697991ccd3a76a38ab7ae2420162627ea2a69b
-
SHA256
ac1aa0426969aa4f3c3303ccbdfba83047cf68e01401e04e8028006a2ddb6aab
-
SHA512
c491419e885bcac5b75456bab87ed4fbb2ad02802b0d314dda7a725c236638ad2b223a80b6856ec1e8e09360bf25b99141891c56211abbb7c1667dacb4361a27
-
SSDEEP
1536:BIj43TYRX0Y9iFAK0E+4LAyKfPKHDysmOIzSw63BtuwVZY9n:QKTYRX0M/BCAyKXmczSw63zq
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
84a12b237c8acc8fc9008da6c48f9a2dffd9feaa2f283968d420250235e2fb34
Headers
Sections
-
out.upx
Headers
Sections