Overview

overview

10

Static

static

10

30198c8443...fd.exe

windows7-x64

9

30198c8443...fd.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    30198c84439d543a1289dfc7c13180e276e98005942b3f16fbf04ae0037f0cfd

  • Size

    216KB

  • MD5

    1e02782028921a8234be313777853c33

  • SHA1

    d1393506abae2fca01cd5be72934b20847873a95

  • SHA256

    30198c84439d543a1289dfc7c13180e276e98005942b3f16fbf04ae0037f0cfd

  • SHA512

    f2ae38acd251860b9bbf379fd58efba4d9d44415a3307af184d7e5a19973dd739bf502292b592a30ebd7dc814b383b052f62188dcf72b9e34f5714c2bfd54df9

  • SSDEEP

    3072:n17DaAz38w3vz7F6PFwgBZTGFKQ+avVe+gGooSlFC2OLKKZAFEMpo4Iv1k:nb8uF6Pf2KQ+aVB2fJqh4Id

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 30198c84439d543a1289dfc7c13180e276e98005942b3f16fbf04ae0037f0cfd
    .exe windows:6 windows x64 arch:x64

    e368d6bc3e0ef21bbf5b85202694f447


    Headers

    Imports

    Sections