Overview

overview

10

Static

static

10

53e7637e0f...fd.exe

windows7-x64

9

53e7637e0f...fd.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    53e7637e0ffa401dd151b360addfce71a55c7af053cd3017a1d07f5a1e8c46fd

  • Size

    99KB

  • MD5

    a80fcfba6be1b5fa734313319f5921e9

  • SHA1

    b90f0e78a1e9f6ead9e777ef81a02f7b6d7373ef

  • SHA256

    53e7637e0ffa401dd151b360addfce71a55c7af053cd3017a1d07f5a1e8c46fd

  • SHA512

    188b546570abffab07ae736d54879f8381b74fa7348321f0ff178e6d5b8975e93f39315097e42096bd82e56c22d03a94f4d120ceb1750532f882380365787389

  • SSDEEP

    1536:CIj460ZSglXo4VSi7o7soljnxiuy5VF1j5Tl+NJFK1dasFdZsI4zi91Kn:Pf0ZSK907soltN6VF1ofK/auxL

Score
10/10
upx

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 53e7637e0ffa401dd151b360addfce71a55c7af053cd3017a1d07f5a1e8c46fd
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections