E:\repos\BlackHunt 2.0\Release\Project.pdb
General
-
Target
79f759ac6c56b40c8d25c638b576dce4d87d48bd7a090a0111f706117db5d1bb.exe
-
Size
707KB
-
MD5
85fd5e424e78cb7be294746051996f9d
-
SHA1
f02254f9273c04355c001419c3b814b1c91dedb1
-
SHA256
3b5627ade4bdeda6ec8b0940e58469136dab782c326c2dadd5009e4f5cde74b7
-
SHA512
4e3089f140ce15b3c8506935041129b0cddd98867b926ad777360171aaa79c19923128a0d9aefcb6487a573963dbb6afdc464fec47587630adba23f31f228423
-
SSDEEP
6144:QcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1R8Svnh:auaTmkZJ+naie5OTamgEoKxLWc8h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
79f759ac6c56b40c8d25c638b576dce4d87d48bd7a090a0111f706117db5d1bb.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections