General

  • Target

    2024-04-16_6e355963c0b8e2ac11f64477fc1f2ab1_babuk_destroyer

  • Size

    79KB

  • MD5

    6e355963c0b8e2ac11f64477fc1f2ab1

  • SHA1

    f67e4271bd6acf8bd34df78e5e7eb2eb4771d05a

  • SHA256

    cb2248a1d1e454db3e6d975e80a2f5f76b9d75cd29ed499fcd4c2f1db18d7db2

  • SHA512

    42bf607ff319e056bdfc496a043339c98c63f7fb08538de06e6d0a511c77eebb9bcf6341ad1e1cd08b9095fbf6feb0bac53edaa6fb8b4da2c9cc84f37928fd2d

  • SSDEEP

    1536:R6UhZM4hubesrQLOJgY8ZZP8LHD4XWaNH71dLdG1iiFM2iG2zs4F:9hZ5YesrQLOJgY8Zp8LHD4XWaNH71dL5

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-16_6e355963c0b8e2ac11f64477fc1f2ab1_babuk_destroyer
    .exe windows:6 windows x86 arch:x86

    202fa14f574c71c2f95878e40a79322d


    Headers

    Imports

    Sections