E:\repos\BlackHunt 2.0\Release\Project.pdb
General
-
Target
a39e67efcc6a55789da228e163bd3d8c2ec2873d305fddf7021f4f038122bdf2.exe
-
Size
707KB
-
MD5
1cc6d258a0a4eb6f71687a79d3b3589e
-
SHA1
cd04ef520232e1e95b74cb2bf19babf483c103cb
-
SHA256
1727eb52d64db7721fb7d65cd0260a7ccffa3d84fe0ade33f588e78d528d8f08
-
SHA512
d4c88960a47ac404b0599de7fc822c920283270ca54b2e0b0c5b7a0643046ac662f72a78bf1f55024ccc28f130b5e3774612f83a20258432596488520608623b
-
SSDEEP
6144:QcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1s8Dvnh:auaTmkZJ+naie5OTamgEoKxLWHjh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
a39e67efcc6a55789da228e163bd3d8c2ec2873d305fddf7021f4f038122bdf2.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections