General

  • Target

    05841e04d52561799010916cce820c96cbcff1858d3b3e30025d53a18c7f81cc.exe

  • Size

    216KB

  • MD5

    4bb8504db2a961860211936540701321

  • SHA1

    4db10d22a1cee35b077a7104d03fdd8ee0c4f2b3

  • SHA256

    05841e04d52561799010916cce820c96cbcff1858d3b3e30025d53a18c7f81cc

  • SHA512

    b20d33e60b3353933995b8a8429b9c53234055fddd9c6f95e55dd32494cce5b84d1224cad731003928c76e31028983dfabf1553188e512b082b49cc3a9e66456

  • SSDEEP

    3072:h17DaAz38w3vd7F6PFwgBZTGFKQ+avVe+gGooSlFC2OLKKZAFEMpo4Iv1k:Fb8cF6Pf2KQ+aVB2fJqh4Id

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 05841e04d52561799010916cce820c96cbcff1858d3b3e30025d53a18c7f81cc.exe
    .exe windows:6 windows x64 arch:x64

    e368d6bc3e0ef21bbf5b85202694f447


    Headers

    Imports

    Sections