E:\repos\BlackHunt 2.0\Release\Project.pdb
General
-
Target
07deca8e4d3581ad9f66e3ee18f0fad390c7194727521d9051c4c7aaa0e1f12a.exe
-
Size
707KB
-
MD5
9966b5c481c1122e0ad220e91fc69f91
-
SHA1
02f7d8f1b35fea4de948994ff5433e544b65bd68
-
SHA256
e7024d4d923cc607fdbc9bd4d6926753a7dfaa2237dcf662764127d98983d72e
-
SHA512
6fbc6e18a75f6806e30bf30a64ee9aec7ecbcea7ec594e4e42e81069a9a0eb8a16654e4f39b451cce63c28b13bdd307de6eb6498ce6dd6842bed73ef25678271
-
SSDEEP
6144:QcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1K8Rvnh:auaTmkZJ+naie5OTamgEoKxLWxFh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
07deca8e4d3581ad9f66e3ee18f0fad390c7194727521d9051c4c7aaa0e1f12a.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections