General
-
Target
396be31995c453e739da1bdfbf657d891b1f35c1ed6fef755fc58927a4da894e
-
Size
99KB
-
MD5
75c926dd214d0ac5f91359d1638bb01f
-
SHA1
4ac9e978843c45bceb13a0ab1b12b1b499972d93
-
SHA256
396be31995c453e739da1bdfbf657d891b1f35c1ed6fef755fc58927a4da894e
-
SHA512
a60e94f22fe9df2ab2704cae1d4e59c9fa5f9a5c085da57d0554ce54dfb570cc30abe87973d18724f7ad44883d6446020850d24fc9d4866664fbe9d41bdbeca0
-
SSDEEP
1536:KIj4NsNf3HZUR5WnPszr0MBEJVLcZL82ZTBv2caHwaCB284O+6n:XQsFHZU5WPLMBEJlcGE7aHwa
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables referencing many IR and analysis tools 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
396be31995c453e739da1bdfbf657d891b1f35c1ed6fef755fc58927a4da894e
Headers
Sections
-
out.upx
Headers
Sections