General
-
Target
b774c4c575e2a18346df450ab251e67ee215ee222d63444b547760a5e20cc992
-
Size
99KB
-
MD5
5de2fbd54302f84753408442937df025
-
SHA1
61fba31ef7327a290192190d5040265fe08dd55e
-
SHA256
d5db23caaef5dc41656fe68ceb65a48c5bfb18d86b2eb050aaaebe50114d42fc
-
SHA512
826c226b55f5b003813d4a9f42677d72a54a67ce72bf4a2d0264989c6fde19a29a31e6e1ce35f364f97003712d29d94f78bcfc736d89fbbe948e146872635b48
-
SSDEEP
1536:UIj4M0ZdglXo4VSi7o7soljnxiuy5VF1j5Tl+NJFK1dasFdZsI4zi91Kn:Rd0ZdK907soltN6VF1ofK/auxL
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
b774c4c575e2a18346df450ab251e67ee215ee222d63444b547760a5e20cc992
Headers
Sections
-
out.upx
Headers
Sections