General

  • Target

    2cf80ccee33bc7a6937e26ea3d5b3d9d4967e9424ed0de20ee2164e1989595d4

  • Size

    216KB

  • MD5

    35cadb71e33b52c1d26385b18c7a727e

  • SHA1

    1b4ebe2a28f3bc16be5e74a5d38dffc3bdbe034c

  • SHA256

    2cf80ccee33bc7a6937e26ea3d5b3d9d4967e9424ed0de20ee2164e1989595d4

  • SHA512

    aa918867f5c5f96585b722dbb931ebd83831cacef3a323fb8afc650e75d92fe93d51d4a74e079fa9d9ae8e6303b73ddc147db6b5e6a6dad4bc158ec7f5da8d4f

  • SSDEEP

    3072:n17DaAz38w3v77F6PFwgBZTGFKQ+avVe+gGooSlFC2OLKKZAFEMpo4Iv1k:nb82F6Pf2KQ+aVB2fJqh4Id

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2cf80ccee33bc7a6937e26ea3d5b3d9d4967e9424ed0de20ee2164e1989595d4
    .exe windows:6 windows x64 arch:x64

    e368d6bc3e0ef21bbf5b85202694f447


    Headers

    Imports

    Sections