General
-
Target
08a38e28cb959adabce4353b817f2ff8763abfb35542d97d42911e1ba2456eeb
-
Size
99KB
-
MD5
7f2f99daedf250c7c5b1ec5a69937238
-
SHA1
b963bd5c7071686fb509935c8563e9615ec296c1
-
SHA256
08a38e28cb959adabce4353b817f2ff8763abfb35542d97d42911e1ba2456eeb
-
SHA512
f2974263e570144c38cb2efe8a92f4fa48c47c6774d62a36b2cf6039dacfca7192f31f30015d19c234c90056c5b2e838cb7290e7a1f3b787910682c206226310
-
SSDEEP
1536:bIj4oqJTYRX0Y9iFAK0E+4LAyKfPKHDysmOIzSw63BtuwVZY5n:CvcTYRX0M/BCAyKXmczSw63zq
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
08a38e28cb959adabce4353b817f2ff8763abfb35542d97d42911e1ba2456eeb
Headers
Sections
-
out.upx
Headers
Sections