General

  • Target

    1ddf9ac310ecbd51243b028b93578b88e9cd2801587ec0f6625610bbeeadab3e

  • Size

    216KB

  • MD5

    7d3c4af3f834fa9802adcfd63cbc6f64

  • SHA1

    143f25ea358f23c85d123caa025cc9bc59e82017

  • SHA256

    1ddf9ac310ecbd51243b028b93578b88e9cd2801587ec0f6625610bbeeadab3e

  • SHA512

    81deefc987947d3a413e35868beca8947fe72e593cab71b0ede0fba5aa62adfe9af96ac47dc9f6743e84583e1bd9a92d93cf7f902566af91e336c55b1d564e19

  • SSDEEP

    3072:n17DaAz38w3vg7F6PFwgBZTGFKQ+avVe+gGooSlFC2OLKKZAFEMpo4Iv1k:nb8pF6Pf2KQ+aVB2fJqh4Id

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1ddf9ac310ecbd51243b028b93578b88e9cd2801587ec0f6625610bbeeadab3e
    .exe windows:6 windows x64 arch:x64

    e368d6bc3e0ef21bbf5b85202694f447


    Headers

    Imports

    Sections