General

  • Target

    fe3fb50047146a969beebcf686f776ee0b8fd2c3a9cdd2b0ad26824a313c8b45

  • Size

    216KB

  • MD5

    c9e617b3543213539ec78669be88307e

  • SHA1

    eb6ead518b1bebd16a33f0c332fff6bd3973e596

  • SHA256

    cac2e144cf602974e5d4a7d8a31f4d2e02240be9f44120edd88d4cbef5cd495b

  • SHA512

    71b8e4cd4999e1e39c3bd1c5b764b6482963446546fdb9ffb01b930a6e44b2e4d7746ed0961a9d4fa39f81e7b938cd201d765462faabb4a9a220b91af4e14667

  • SSDEEP

    3072:m17DaAz38w3vc7F6PFwgBZTGFKQ+avVe+gGooSlFC2OLKKZAFEMpo4Iv1k:Gb8lF6Pf2KQ+aVB2fJqh4Id

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fe3fb50047146a969beebcf686f776ee0b8fd2c3a9cdd2b0ad26824a313c8b45
    .exe windows:6 windows x64 arch:x64

    e368d6bc3e0ef21bbf5b85202694f447


    Headers

    Imports

    Sections