Overview

overview

10

Static

static

10

5cbc5841d3...45.exe

windows7-x64

9

5cbc5841d3...45.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    5cbc5841d3c3f8cc9ee249a723b03897e1cb3efd7c3bf0fddd4988fdd128a945

  • Size

    99KB

  • MD5

    5f6f03b48b15a561f5bca39ef8718eb0

  • SHA1

    71c20b901e196da8b43cacc97fddad8e795d049d

  • SHA256

    5cbc5841d3c3f8cc9ee249a723b03897e1cb3efd7c3bf0fddd4988fdd128a945

  • SHA512

    688041082924fb09096c3860475e8d04ad17ad93fcefa03795e7266fd706c036f99ce1f21e48091f1941dd6dbc402dc613c6616b71df86b677df73c4c31b898c

  • SSDEEP

    1536:XIj49MHXXE48/j2ObRTTvo5urjEa8CG04jgMgm0Y5+yQn3WwzEjxAL2b9Hn:2uMHni/jtRXoG13t4IIpwWwYlc

Score
10/10
upx

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5cbc5841d3c3f8cc9ee249a723b03897e1cb3efd7c3bf0fddd4988fdd128a945
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections