General

  • Target

    3a229250ac60dec465a9613cb9dc18eef9d91be125cef584bcccdf40b178c592

  • Size

    216KB

  • MD5

    d6616104f75b785891c3bf8bd97866f9

  • SHA1

    dfa23eb17c559044adfbff2ef770da31d1b01290

  • SHA256

    3a229250ac60dec465a9613cb9dc18eef9d91be125cef584bcccdf40b178c592

  • SHA512

    4a8fac40d5d42140211dc641e4e31f182e6c5e64d13dc97116fff6b161f06642f1d1021b53e33b8f2b3edaa117a6480c5c3dba7273affeb5d288fe95ae88f736

  • SSDEEP

    3072:q17DaAz38w3vQ7F6PFwgBZTGFKQ+avVe+gGooSlFC2OLKKZAFEMpo4Iv1k:ab85F6Pf2KQ+aVB2fJqh4Id

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3a229250ac60dec465a9613cb9dc18eef9d91be125cef584bcccdf40b178c592
    .exe windows:6 windows x64 arch:x64

    e368d6bc3e0ef21bbf5b85202694f447


    Headers

    Imports

    Sections