General
-
Target
260edcf8dc4015ef79469c13bcce084dd76b22f0b16a4e9a4e743a9870cf4b34
-
Size
99KB
-
MD5
192c82d44bc1eda70509eab55a685f8f
-
SHA1
1239f951a5071588a11a369bfd371c5e7e8af991
-
SHA256
260edcf8dc4015ef79469c13bcce084dd76b22f0b16a4e9a4e743a9870cf4b34
-
SHA512
dca1de5665a01a5ab1b69d702be17c06bdc4ac4dc62379bd393ba01339d4ab3605f0f435caef0442af61cdcac49ff5baff8967747d1bb8333175b5ef5acfc3f6
-
SSDEEP
3072:3S0ZmJSuICoVLop3pYTGGcBtkowoxxnNycSi7LTl:vZmguYq2GGEkowCFpZfT
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
260edcf8dc4015ef79469c13bcce084dd76b22f0b16a4e9a4e743a9870cf4b34
Headers
Sections
-
out.upx
Headers
Sections