E:\repos\BlackHunt 2.0\Release\Project.pdb
General
-
Target
37c5975aece8b7b5d4f35272b51af60f575b8827da98601ac18e37ef960112be.exe
-
Size
707KB
-
MD5
88f1e13aee7d5bb776d921ad13cf8460
-
SHA1
222182e03723eb866bf24965d7a00c17a0b28b76
-
SHA256
de62c0dc336092665e2a45d7ae043598ed1232ffff36046f144379da2c349242
-
SHA512
e504e2cf608c9a0c51a8ef6426cc83241c579426e94954d92ac4857eba0b1fdf3b85a8ee869fe747258392f5c44e1ce27ee71f9f747aeac16a7ab065a46d81d1
-
SSDEEP
6144:QcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1L8jvnh:auaTmkZJ+naie5OTamgEoKxLWSDh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
37c5975aece8b7b5d4f35272b51af60f575b8827da98601ac18e37ef960112be.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections