E:\repos\BlackHunt 2.0\Release\Project.pdb
General
-
Target
82f9a5e7f3a8f26a898760c7520833eb1769fc1cd88f4d01d303e1f4c834f6b1.exe
-
Size
707KB
-
MD5
ca8c5c3917e0e0eb6800487530f0779f
-
SHA1
3767d782603dfe1e9069f7ec4662d863b964a226
-
SHA256
e102154e2e04bbdf6d7c673e0854e8d509bd9ad113f87bb7a3a8b264f56513c6
-
SHA512
11bf1e61f98b14fad24d120f5da8c752a60792cf8931b6dd970405aea35e429fb1b535a490aa75fb62219241018d69561a9fb3280a7c738305b94c076d58ae3d
-
SSDEEP
6144:QcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1Z8svnh:auaTmkZJ+naie5OTamgEoKxLWkyh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
82f9a5e7f3a8f26a898760c7520833eb1769fc1cd88f4d01d303e1f4c834f6b1.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections