General
-
Target
2be423f58f5ef45da2345f89850e5ae49f5f71b294c570b19c63f550b9bb4e88
-
Size
99KB
-
MD5
c1983c4c58a71391fc282484f5fc5027
-
SHA1
c8889f1cc2c8a3d4ad91b85dd684d8fcb9f587cd
-
SHA256
2be423f58f5ef45da2345f89850e5ae49f5f71b294c570b19c63f550b9bb4e88
-
SHA512
80e8581e63be275cdc5070a62f2d7fcf2fcfa2f40a5d016e92da1fb1117a48a685c819210fb9bda51cd3977bcdaecbdbbfb1df3aed50213c61a0a88b2d0a7a70
-
SSDEEP
1536:KIj4EqMkoTSn96Qz/YkrlbNEAjNrkN8Wy11VwpC6GX9zpZtrR6Shhd9on:XF2D6QDrULy13r9zpZtrR6SB9
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
2be423f58f5ef45da2345f89850e5ae49f5f71b294c570b19c63f550b9bb4e88
Headers
Sections
-
out.upx
Headers
Sections