General

  • Target

    487eb839eaf3e60c69a234d3a79813474867df05bfa6a7977646e757310d9945

  • Size

    216KB

  • MD5

    96036cb2a3641b8d5722c899f4a55594

  • SHA1

    6ddd0595ba4871afee8bbe73265cfa9533288c47

  • SHA256

    487eb839eaf3e60c69a234d3a79813474867df05bfa6a7977646e757310d9945

  • SHA512

    350875427fbc6dd66d8366227cdb3f9401c309c9950459b78706db79dbd4085f42e8a2873d6ef54d48beb2964d17d665b1958515a64e9f4a108628d712e000c8

  • SSDEEP

    3072:q17DaAz38w3v87F6PFwgBZTGFKQ+avVe+gGooSlFC2OLKKZAFEMpo4Iv1k:ab81F6Pf2KQ+aVB2fJqh4Id

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 487eb839eaf3e60c69a234d3a79813474867df05bfa6a7977646e757310d9945
    .exe windows:6 windows x64 arch:x64

    e368d6bc3e0ef21bbf5b85202694f447


    Headers

    Imports

    Sections