E:\repos\BlackHunt 2.0\Release\Project.pdb
General
-
Target
674100b112a57c82021dd570de56b9f999168d363b703912bff0062d4fdf1924.exe
-
Size
707KB
-
MD5
0da43a199dfa17d77a4469a4f22fbcf8
-
SHA1
fb4c1de54d33a3b36a0e255c3499a97620462606
-
SHA256
320ef5fe12a08019745527381fde243913fea7cd6a01f0327e45e5086c60a1d9
-
SHA512
c0b394800d2541a60f0630112024a00569dcd4e99774a0947d8f69a63d004916857441bfb5890a169b2f552d264d799dfd2736b7eafd2495845ecc991f5e7166
-
SSDEEP
6144:QcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1x8/vnh:auaTmkZJ+naie5OTamgEoKxLWcXh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
674100b112a57c82021dd570de56b9f999168d363b703912bff0062d4fdf1924.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections