General

  • Target

    2024-06-12_8ed01e5793d1a64c767f54ce9d332cc1_babuk_destroyer

  • Size

    79KB

  • MD5

    8ed01e5793d1a64c767f54ce9d332cc1

  • SHA1

    a910f0c1208798406b4d683430460036f76934db

  • SHA256

    74ca441d149c7ceae8e1ba7b65a199e033ebf5ee6988edf11447d7de65517a14

  • SHA512

    b7448777886153e16d5878e77a539718ceff7cfc2fb8f79486bc0abb37fd5f79d3aeb5027eb69291aed979adb66b3b67525a694b52e844bd9e5856f2a76fdfc0

  • SSDEEP

    1536:85UhZM4hubesrQLOJgY8ZZP8LHD4XWaNH71dLdG1iiFM2iG2zs4:zhZ5YesrQLOJgY8Zp8LHD4XWaNH71dLI

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-12_8ed01e5793d1a64c767f54ce9d332cc1_babuk_destroyer
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections