General

  • Target

    2024-05-02_ebebcdd62d090db60d72d9f6986481f2_babuk_destroyer

  • Size

    79KB

  • MD5

    ebebcdd62d090db60d72d9f6986481f2

  • SHA1

    ccfc01865f8681e66c6018e5d2025d19ca6f8c76

  • SHA256

    358cd5cb2632982ba092c901522455741120bfc2b69782a2fd322d096b3b2f94

  • SHA512

    3f1be7132f14456f8b7694fef33aba250c7e6c3dc2938d71b200800cf491002ece2da1ed3be6e53a4a9dadad95c76707aab6561748bbb73536d744734b15d13b

  • SSDEEP

    1536:wk4Bh+fyPhBV66ksrQLOJgY8ZZP8LHD4XWaNH71dLdG1iiFM2iG2S8bv/:oh+fyPpLksrQLOJgY8Zp8LHD4XWaNH7P

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-02_ebebcdd62d090db60d72d9f6986481f2_babuk_destroyer
    .exe windows:6 windows x86 arch:x86

    08af3fd619347e60a9ad285f899f6815


    Headers

    Imports

    Sections