Overview

overview

10

Static

static

10

AntiVC.dll

windows7-x64

1

AntiVC.dll

windows10-2004-x64

1

register.exe

windows7-x64

10

register.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a0862dfb83d927119ac4ded2f9159e5307bcbb3be13aff08076c509aed806447

  • Size

    545KB

  • MD5

    a52a4145f86cd91a62e93a98159db4dd

  • SHA1

    bcc2c62cc75731849e5199f80570fe98a05491f3

  • SHA256

    a0862dfb83d927119ac4ded2f9159e5307bcbb3be13aff08076c509aed806447

  • SHA512

    55aa81dd71d57b7b56b2dc0c40f2d03927ac5ca5ca3d1b96e6fd5edc37fb71b83c57c7a1e476853df242a22903c19f844b998b106790b0494f39ba1444b5fd25

  • SSDEEP

    12288:CQEGRSTSFJ+A1PHlko8/ehmXTKUhOV9KlnlCT1DPIGJJM2ZS61H:WG4S6KNkvwmXMmorlcOT

Score
10/10
upxblackmoon

Malware Config

Signatures

  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 1 IoCs
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • a0862dfb83d927119ac4ded2f9159e5307bcbb3be13aff08076c509aed806447
    .rar
  • AntiVC.dll
    .dll windows x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows x86


    Headers

    Sections

  • register.exe
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections

  • vote.dat