General

  • Target

    28dfd1139039e41438890942cc9e39c177131f6b7aaed597e45d2432f9e21dfe

  • Size

    216KB

  • MD5

    2000cd60774dc086f4ba3b636d1ecbb9

  • SHA1

    bd6d39850bde621410137b2d63d990f431d64c9b

  • SHA256

    28dfd1139039e41438890942cc9e39c177131f6b7aaed597e45d2432f9e21dfe

  • SHA512

    7fa77e76ed04921bf5b7cce5d27ee37b680df32bb9bae8c771ac5721e735fc170d0afa305eb83fe871c7a8b25eb9f61098d979b92a919f02860dbff662207c10

  • SSDEEP

    3072:n17DaAz38w3vK7F6PFwgBZTGFKQ+avVe+gGooSlFC2OLKKZAFEMpo4Iv1k:nb8fF6Pf2KQ+aVB2fJqh4Id

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 28dfd1139039e41438890942cc9e39c177131f6b7aaed597e45d2432f9e21dfe
    .exe windows:6 windows x64 arch:x64

    e368d6bc3e0ef21bbf5b85202694f447


    Headers

    Imports

    Sections