E:\repos\BlackHunt 2.0\Release\Project.pdb
General
-
Target
26e8dd367c16f477c8c94017c466c18d70c2474de2e2e77288b59f0d6af552c1.exe
-
Size
707KB
-
MD5
a687d71b2e3785c39a154a9fa3675ae3
-
SHA1
d31d09b739a66f91eab407f2fc357b59d3b31417
-
SHA256
6ac7d7633bbd5c835025f51d5a151ebd8693ba310e75a2b1b81e6f399475b900
-
SHA512
31430f8edf3312e84b39b2dbc47c374bdfd07ed3cbb12bb867b1a95e9f9edfab4e721ad67a7d113692a8d75fbc472f1603b2129781c609258d3619b40c780690
-
SSDEEP
6144:QcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1i8+vnh:auaTmkZJ+naie5OTamgEoKxLWZgh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
26e8dd367c16f477c8c94017c466c18d70c2474de2e2e77288b59f0d6af552c1.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections