General
-
Target
2f8947460f78ccc2184d166b62d4f46a138054d08662589881f84376950c017d
-
Size
99KB
-
MD5
26fbecf5b1e855fe81fb30da0abf0f5e
-
SHA1
b84f857d965df6ff862f238d8f1f356814b75c12
-
SHA256
2f8947460f78ccc2184d166b62d4f46a138054d08662589881f84376950c017d
-
SHA512
9fef3e70ec8fed0c4a453ed235a8dcef3139dd9a723db270d60d69876deb44cdf34fc18f935b8b9091fc4f3f1efd33152e728a03d388303b564f853df9019bfc
-
SSDEEP
1536:qIj47yUN3HZUR5WnPszr0MBEJVLcZL82ZTBv2caHwaCB284O+6n:3lUJHZU5WPLMBEJlcGE7aHwa
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
2f8947460f78ccc2184d166b62d4f46a138054d08662589881f84376950c017d
Headers
Sections
-
out.upx
Headers
Sections