General
-
Target
2a356650f73ee4aef489dac27847bb4aab90652c569de4cd6824351cbf38fb23
-
Size
99KB
-
MD5
864d61080eef8451a92d47aee96cd9d1
-
SHA1
14dff2f343ed43d1a11376c22e81db20abdced95
-
SHA256
2a356650f73ee4aef489dac27847bb4aab90652c569de4cd6824351cbf38fb23
-
SHA512
b413be3f531b5dae859d376170ab73df18af0143369d55af5b92f1a7f7b8dde8e06b27da003464daca86750050fff9a89ce3590528aac2258be43b622823cf5b
-
SSDEEP
1536:zIj4e4GFLJoKTkTqRhM0rDLrLUJhF/5zGZ3eWPujplO178vTPjJ5bHYMwaq5W7n:6G0Jo8kqh2x4herb7PjjrY8
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
2a356650f73ee4aef489dac27847bb4aab90652c569de4cd6824351cbf38fb23
Headers
Sections
-
out.upx
Headers
Sections