E:\repos\BlackHunt 2.0\Release\Project.pdb
General
-
Target
ae5ff7c2436797748342978826f8f4ac198265f99a0fe2b35e2f72471fdf0fff.exe
-
Size
707KB
-
MD5
709c442276bcb0c23ebdba66e0a6c507
-
SHA1
7894352334016c11efa28eab87c62188cca57c93
-
SHA256
727bc2279d33ffffdc6fbb757a95a7d805e8e0701d197f5f313789225d54f50c
-
SHA512
bb468fa9d594a0342ba096a628611d2037697a80338074bafda922124b27a55f6b26ddf29fc83c475ca7a7f2f42fc16d03febafbf1a0bd8e01f064e910b5c871
-
SSDEEP
6144:QcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza148+vnh:auaTmkZJ+naie5OTamgEoKxLWLgh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
ae5ff7c2436797748342978826f8f4ac198265f99a0fe2b35e2f72471fdf0fff.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections