E:\repos\BlackHunt 2.0\Release\Project.pdb
General
-
Target
9390c55a81dcc9a43eb878d441eec6cfdf33f7da0288ee29cb8e25a203599a30.exe
-
Size
707KB
-
MD5
8e19e6c57c65ed4c9591bf2039ea9795
-
SHA1
f23459f42dcdce4d4a525f57beb0ce76793a52c9
-
SHA256
3390707d296a5b257d324aaf344ce4ba223577e043405e621e0e7e6468ffc334
-
SHA512
9fbfd0ef1827fb343bad508b77b07d70fed89c0972796f3adf75e45213d708c56911ff38a037d732c5fb93ed04084a99d5b03f074ac96c303550b342bfc3bb0b
-
SSDEEP
6144:QcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1c8uvnh:auaTmkZJ+naie5OTamgEoKxLWHwh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
9390c55a81dcc9a43eb878d441eec6cfdf33f7da0288ee29cb8e25a203599a30.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections