Overview

overview

10

Static

static

10

03bb1b910e...37.exe

windows7-x64

9

03bb1b910e...37.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    03bb1b910ecad829b18484ededf23259e2e91011bfe52e4ce4980fd162e95e37.exe.compressed

  • Size

    99KB

  • MD5

    77b8b0c10218590ffcc66c9ed7a24d86

  • SHA1

    0fe3c7ce34af6f8f172cae4cb3771dc211fb73aa

  • SHA256

    c42f5fd02b8d682af47d6752d9988b28ee9e9c490c43f8bf15e344c73cbf211f

  • SHA512

    74fed8357b3a390abe0f43a1fec2c5654fdf2a3034acc225cf7e76edacc484b8402f2c9d15510db213b32363c9f7be9fc4b00c3cee85db94d1ff623faa8a9e48

  • SSDEEP

    1536:uIj4kWd0ni8l4ZOtIsdm+s2sQ4yFVP8eflx69g6KWmhPK39Ijs4248YaaFQ2nDgn:T6v8QOrmj211/1flQSvJhST48

Score
10/10
upx

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 03bb1b910ecad829b18484ededf23259e2e91011bfe52e4ce4980fd162e95e37.exe.compressed
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections