E:\repos\BlackHunt 2.0\Release\Project.pdb
General
-
Target
29895cc300529ed2b6f5473b5ca04108b3159c51cd74177280d4d10dfac565ff.exe
-
Size
707KB
-
MD5
0b21f3f2f9db51aaa31ca0733b67c584
-
SHA1
f9890380c380267043ae1de8a74972c605112a18
-
SHA256
3073343c4f361806dd2d48869b31ee9863dd4e93f6b48766c51cb6c01971d1f2
-
SHA512
24142859a883a7b1a43b088890e0735a0e05680cb78e2b82f73e48adc43fba54b13c3d0dcb6a889633c0665aede8205378633a0fd96bc2bf7c28f01b27d25a11
-
SSDEEP
6144:QcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1v8Gvnh:auaTmkZJ+naie5OTamgEoKxLWG4h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
29895cc300529ed2b6f5473b5ca04108b3159c51cd74177280d4d10dfac565ff.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections