General

  • Target

    31c9adc4153216f5d769a1c08d01277c5d231e4e699c9c52ce74995c8c48a291

  • Size

    216KB

  • MD5

    c1672522572b516e906fc7917c55c9af

  • SHA1

    5f717f54bd6330b2b0e50d3d6c0073687a86ffa1

  • SHA256

    31c9adc4153216f5d769a1c08d01277c5d231e4e699c9c52ce74995c8c48a291

  • SHA512

    6e4c3c244529d5785904997263a9a281f6e37b5fe65c91e76b89ba1a1022c8d98262e78d7ecb3bec8995c3e3d5fe91fc57d603d0128262156ed6ab5dc9efa5d1

  • SSDEEP

    3072:n17DaAz38w3vs7F6PFwgBZTGFKQ+avVe+gGooSlFC2OLKKZAFEMpo4Iv1k:nb81F6Pf2KQ+aVB2fJqh4Id

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 31c9adc4153216f5d769a1c08d01277c5d231e4e699c9c52ce74995c8c48a291
    .exe windows:6 windows x64 arch:x64

    e368d6bc3e0ef21bbf5b85202694f447


    Headers

    Imports

    Sections