E:\repos\BlackHunt 2.0\Release\Project.pdb
General
-
Target
57414ac3eae4d31eca04b5bb04b9a8c76f4c665a7444f62fb2d5aac43754ff54.exe
-
Size
707KB
-
MD5
b8d46cfc06b0a4a46f989fc40e51dd46
-
SHA1
14121f501db0a46b35d55a5302e25d897bcefb57
-
SHA256
33fd7c8dc5bd097d95c45958d139a57750c93575d3c0ddb0982b2b6c5c14e675
-
SHA512
2fa7cf199b74ce240616ec7399e90da66a7f7650eeb17030900edeed8bdb647086489f8c91df370a362e27376da3fd67f013021063260e3a24246311329e411b
-
SSDEEP
6144:QcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1b8evnh:auaTmkZJ+naie5OTamgEoKxLWSAh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
57414ac3eae4d31eca04b5bb04b9a8c76f4c665a7444f62fb2d5aac43754ff54.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections