E:\repos\BlackHunt 2.0\Release\Project.pdb
General
-
Target
8688e6fade327d52392aa3400b14c4f9d31f0ea4be9f50d66b723ababdcf50c2.exe
-
Size
707KB
-
MD5
66d4a3851a2547e64f37910a3f6845bd
-
SHA1
92f0fcd7bb71f1553ec57a2c448add26e287daab
-
SHA256
53fdc4fd1c192d582c5dbd3c73fb235090a02dcb4083ced5baf4505768e07bd2
-
SHA512
bfea1ee86dcbe4ee9b858e93b84ef8f65b273d3f9735c6b58ed5234a3071317533d6921e4ec5c6861cab11cdb73c6245c333ea4759061575dc03d081ad273f9c
-
SSDEEP
6144:QcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1g8kvnh:auaTmkZJ+naie5OTamgEoKxLWzah
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
8688e6fade327d52392aa3400b14c4f9d31f0ea4be9f50d66b723ababdcf50c2.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections