E:\repos\BlackHunt 2.0\Release\Project.pdb
General
-
Target
3bc51ff0a13c13654ec553610814a40e565bc58b07b67ba936568c18335bc868.exe
-
Size
707KB
-
MD5
3a064ccd022c3b71c25a536602fb6cc5
-
SHA1
d610f18b34b6c12c6cd925e1be94a649dfc9baba
-
SHA256
35808c605b5284efbb62d11db3cf62bc2ccae5c17e797d17953e45e7d3fd3310
-
SHA512
e91dbb5aff6cbb5ee29627804acc0b1d5692ecfc0ae19802096709cabd53574be4278d4f5869051b8dacb26110f80f778d2831a127faaa29f15f755592abc06a
-
SSDEEP
6144:QcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1o8Mvnh:auaTmkZJ+naie5OTamgEoKxLWDSh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3bc51ff0a13c13654ec553610814a40e565bc58b07b67ba936568c18335bc868.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections