General

  • Target

    2bc78b2cb385b002ee7cf3406e93c7ee336765022f9c3298637dc6496d8fc2fe

  • Size

    11.2MB

  • MD5

    79225ea0838211b5d0784dd0bcf7a877

  • SHA1

    e92e39fbbf074fa076bd65f41bb8877aba71fc8c

  • SHA256

    2bc78b2cb385b002ee7cf3406e93c7ee336765022f9c3298637dc6496d8fc2fe

  • SHA512

    d6a75dbe60d46750e47ea1d55a318e272c12f5b10085c252362e93df489f9dba74e2a974684e6720e4ef234a4cbbf61eb8270254da379e06b96126061c276132

  • SSDEEP

    196608:KaixOP4K0wRB9hQjqjnMwud/Dd/saC/CEdhmNajpArORrtpp0hnAPwuEGQ2g2+Xe:Kasc4K0wb98gn/kea4xH6yjpuxRc/1MY

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

Files

  • 2bc78b2cb385b002ee7cf3406e93c7ee336765022f9c3298637dc6496d8fc2fe
    .zip
  • 츨12.16ɫ/츨.url
    .url
  • 츨12.16ɫ/Ա.url
    .url
  • 츨12.16ɫ/츨12.16ɫ/33BEE5EE.dat
    .exe windows x86

    74aa1b215003e47d3db2ffec14e884fa


    Headers

    Imports

    Sections

  • 츨12.16ɫ/츨12.16ɫ/3km2.dll
    .dll windows x86

    3d859c332b0bf0b0d1a14f49350a54a9


    Headers

    Imports

    Exports

    Sections

  • 츨12.16ɫ/츨12.16ɫ/Astar.dll
    .dll windows x86

    30e657f1f40d17e31263ff2a1027d7a5


    Headers

    Imports

    Exports

    Sections

  • 츨12.16ɫ/츨12.16ɫ/Dll.dll
    .dll windows x86

    a92498414db21a706a4a16a356512c1a


    Headers

    Imports

    Exports

    Sections

  • 츨12.16ɫ/츨12.16ɫ/GetInfo.dll
    .dll windows x86

    b472b00c33930cac8adc882e982e968c


    Headers

    Imports

    Exports

    Sections

  • 츨12.16ɫ/츨12.16ɫ/Lua.dll
    .dll windows x86

    5e31d04adf39fed5d16a590f2b3bae68


    Headers

    Imports

    Exports

    Sections

  • 츨12.16ɫ/츨12.16ɫ/gom.dat
    .exe windows x86

    56c3c44f14c64295f9c942d5c3e3625b


    Headers

    Imports

    Sections

  • 츨12.16ɫ/츨12.16ɫ/gom.dll
    .dll windows x86

    4923041e4cb39b4f32b023bb454d002f


    Headers

    Imports

    Exports

    Sections

  • 츨12.16ɫ/츨12.16ɫ/jx.dat
  • 츨12.16ɫ/츨12.16ɫ/jx.dll
    .dll windows x86

    d9a79a745a929acdbfa02a577f643f0c


    Headers

    Imports

    Exports

    Sections

  • 츨12.16ɫ/츨12.16ɫ/ly.dat
  • 츨12.16ɫ/츨12.16ɫ/qingtiandata.dat
  • 츨12.16ɫ/츨12.16ɫ/sky.dll
    .dll windows x86

    91a49fa438a70ea8e8cfc02d537d32b9


    Headers

    Imports

    Exports

    Sections

  • 츨12.16ɫ/츨12.16ɫ/temp.dat
    .exe windows x86

    111a8b78a1d8aa470936ce9b1afa58af


    Headers

    Imports

    Sections

  • 츨12.16ɫ/츨12.16ɫ/ty.dat
    .exe windows x86

    bf1481ed65fed5d9d77e9e96e54129ca


    Headers

    Imports

    Exports

    Sections

  • 츨12.16ɫ/츨12.16ɫ/ty.dll
    .dll windows x86

    5b7ec16ed19ff7926ee7bae0090291d2


    Headers

    Imports

    Exports

    Sections

  • 츨12.16ɫ/츨12.16ɫ/update.exe
    .exe windows x86

    e303a9a374a42905565cf07442368623


    Headers

    Imports

    Sections

  • 츨12.16ɫ/츨12.16ɫ/wd.dat
  • 츨12.16ɫ/츨12.16ɫ/ws.dat
  • 츨12.16ɫ/츨12.16ɫ/ws.dll
  • 츨12.16ɫ/츨12.16ɫ/yx.dat
  • 츨12.16ɫ/츨12.16ɫ/ű/װ
  • 츨12.16ɫ/츨12.16ɫ/ű/Զ
  • 츨12.16ɫ/츨12.16ɫ/ļ/SKY/00.ini
  • 츨12.16ɫ/츨12.16ɫ/ļ/SKY/1.76.ini
  • 츨12.16ɫ/츨12.16ɫ/ļ/SKY/1.85.ini
  • 츨12.16ɫ/츨12.16ɫ/ļ/SKY/PK.ini
  • 츨12.16ɫ/츨12.16ɫ/ļ/SKY/.ini
  • 츨12.16ɫ/츨12.16ɫ/ļ/SKY/һ.ini
  • 츨12.16ɫ/츨12.16ɫ/ļ/SKY/ʧٵ.ini
  • 츨12.16ɫ/츨12.16ɫ/ļ/SKY/ʧ౶.ini
  • 츨12.16ɫ/츨12.16ɫ/ļ/SKY/.ini
  • 츨12.16ɫ/츨12.16ɫ/ļ/SKY/б౶.ini
  • 츨12.16ɫ/츨12.16ɫ/ļ/SKY/бӰ.ini
  • 츨12.16ɫ/츨12.16ɫ/ļ/config.ini
  • 츨12.16ɫ/츨12.16ɫ/츨12.16ɫ.exe
    .exe windows x86

    d21b66ced11e375c323d1cc90edca26d


    Headers

    Imports

    Sections

  • 츨12.16ɫ/½ҷ.txt
  • 츨12.16ɫ/վٳ޸ߡؿ.txt