General
-
Target
01b793d2be39b5f8b85d5398376c2d9563c7550e9bb867fe212abe256eae4d26.exe.compressed
-
Size
99KB
-
MD5
2fef04c6ab81b4f21d41aa075f1319b5
-
SHA1
015d8a3ad57dd78bf47bc45fe98a5d0765c4c684
-
SHA256
1239fd87ca44bd954f97da50e1d40f0dfa753e7cf0819d175782a249b97813ad
-
SHA512
620de4b8075d28486a1f081aef3df275ed1faef320dfb6dba11eadf87a1c0f1392d3d53a386ec0aa089c0feace2900f0c0f10ca3972414881dc1f828e2db6403
-
SSDEEP
1536:yIj4JY4GFLJoKTkTqRhM0rDLrLUJhF/5zGZ3eWPujplO178vTPjJ5bHYMwaq5WLn:/k0Jo8kqh2x4herb7PjjrY8
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
01b793d2be39b5f8b85d5398376c2d9563c7550e9bb867fe212abe256eae4d26.exe.compressed
Headers
Sections
-
out.upx
Headers
Sections