E:\repos\BlackHunt 2.0\Release\Project.pdb
General
-
Target
64952314b43d23d31e0c99e1ba271ca31c3306e1e7650a9b55729d4b73d671d0.exe
-
Size
707KB
-
MD5
a2470e846c151a4244f3c2c713e0a543
-
SHA1
1bbd2c797b068a246cdadfef23cc2d7b94725de7
-
SHA256
1704f393487b8d538eda9fb2931cbcfba0f5c0099f191090b79ff9c3ccf8bfb3
-
SHA512
83193aead0cefdc72715073e6d091461a7ffa04decf3a1802832dedf19eb2554522a3a1b9c32dce47ca4d5a2c7c68e09824ab67172251d15afdb2c12936eb65e
-
SSDEEP
6144:QcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1c8rvnh:auaTmkZJ+naie5OTamgEoKxLWn7h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
64952314b43d23d31e0c99e1ba271ca31c3306e1e7650a9b55729d4b73d671d0.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections