E:\repos\BlackHunt 2.0\Release\Project.pdb
General
-
Target
13db6765368c738961593eae516df3820a302e0bd12b38e52dec06f6f4b567e5.exe
-
Size
707KB
-
MD5
b8ba157f3afda2fdd972c2983e9c699d
-
SHA1
f4ae75a342241efc46ca74e07da37f8bd2d1ca0a
-
SHA256
cb7a23f582d0cf6bfc7eb00a44d6556a5e075daf5e2e6e4e3f6a2d7d656ee865
-
SHA512
ae6d58309dfe9d7eb604ad4d0f5ffe35e16df9945ee5f60e8f026e2009e3b7a74c0ba24eb2625e40e1bb692ee05d23890c6648eb135f8893e7907919e9fffd24
-
SSDEEP
6144:QcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza108cvnh:auaTmkZJ+naie5OTamgEoKxLWXCh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
13db6765368c738961593eae516df3820a302e0bd12b38e52dec06f6f4b567e5.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections