E:\repos\BlackHunt 2.0\Release\Project.pdb
General
-
Target
e89fd75993c498753323713c57e9339ae079d3777172a0d05f17d8c5a6c4a607.exe
-
Size
707KB
-
MD5
3797a44c439071026eef3166828d5ebb
-
SHA1
cd5604b54bb746c7b00027a01306acea20557b41
-
SHA256
37f27df6afff20d8bb208f957ff2ad3260d407373ed43fe978738bd8659ef6d0
-
SHA512
9c610c1c9779baed8ec65419a7f93f86af8643bec3ec14f37758f41907414da56cebd59cc64fc4ca3547481b697c2aa113860922f5d8bb618e4f965898db0969
-
SSDEEP
6144:/cmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza128Fvnh:TuaTmkZJ+naie5OTamgEoKxLW9hh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
e89fd75993c498753323713c57e9339ae079d3777172a0d05f17d8c5a6c4a607.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections