E:\repos\BlackHunt 2.0\Release\Project.pdb
General
-
Target
248bf95d56a826ce388a31af6f0ea3756ef7da090e1b31ae5a9b76864ef2bbd7.exe
-
Size
707KB
-
MD5
54fc2e3de861c17dcb9705376031b740
-
SHA1
8829bf8de95f7b3cda4a35d2f96b66f309856aa4
-
SHA256
99b14eb98b55f0916e7e3d2e96dffe9072104b45e68b9b82bd5cc2fdacd71576
-
SHA512
dd6150edb28fb31b2a5be74b39d530515a0ec71bfcce0ce4fb3e11740de146ca12cd90ffdbc21b64c3bc03dfdc78539e148817791584cb778603fe37eecdb7c9
-
SSDEEP
6144:QcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1o8mvnh:auaTmkZJ+naie5OTamgEoKxLW7Yh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
248bf95d56a826ce388a31af6f0ea3756ef7da090e1b31ae5a9b76864ef2bbd7.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections