Overview

overview

10

Static

static

10

25a28c50d6...59.exe

windows7-x64

9

25a28c50d6...59.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    25a28c50d6f747561e43d701f30cbf05895978c51e0756b59c5715c3edd48f59

  • Size

    216KB

  • MD5

    9d025b5bb2647443da49625ade77c4fb

  • SHA1

    a1e9d8c99ddb3f0959560b576070b8377a998f79

  • SHA256

    25a28c50d6f747561e43d701f30cbf05895978c51e0756b59c5715c3edd48f59

  • SHA512

    8feb16f8500e9352f0d9b45a37fe80d080df79ee0f2b358d0313e8144c12baac5129c9d0908d4f57174d4b0f846e3e47935069e2cecf49da5b187191fce40c10

  • SSDEEP

    3072:n17DaAz38w3vJ7F6PFwgBZTGFKQ+avVe+gGooSlFC2OLKKZAFEMpo4Iv1k:nb8IF6Pf2KQ+aVB2fJqh4Id

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 25a28c50d6f747561e43d701f30cbf05895978c51e0756b59c5715c3edd48f59
    .exe windows:6 windows x64 arch:x64

    e368d6bc3e0ef21bbf5b85202694f447


    Headers

    Imports

    Sections