General
-
Target
26b58ddb3bb42fdc0993070bfc8bec5c522e3d106bae1104f061f2b01c6a25d9
-
Size
99KB
-
MD5
6ee42c017bb92f1fbc0d30239da1e74d
-
SHA1
fd477108f31c82c2b26c94ace4f5d3d2fcf6fa90
-
SHA256
26b58ddb3bb42fdc0993070bfc8bec5c522e3d106bae1104f061f2b01c6a25d9
-
SHA512
8785ccfd245c44869faa4d77b619643cd80fa9872c8103082256987ab82a810145ed105ed590c1f410e724c44acd2cf3d15bed3737518fef7a57f3a4830dbf40
-
SSDEEP
1536:yIj4u0wVb5ubKDQ2IrF9eVpAkf5FXsQ8WxBU5t8q/ZXvNQjmDgODfHrn+rSn:/h0aWrF9er5FXsPWxctrlhDXzHr+
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
26b58ddb3bb42fdc0993070bfc8bec5c522e3d106bae1104f061f2b01c6a25d9
Headers
Sections
-
out.upx
Headers
Sections