Analysis
-
max time kernel
39s -
max time network
44s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
27/11/2022, 20:52
Behavioral task
behavioral1
Sample
b84e1db35ad727baa786e3be053842ac2287cd70ec2b00c4e432a46c37e357fc.exe
Resource
win7-20220812-en
3 signatures
150 seconds
General
-
Target
b84e1db35ad727baa786e3be053842ac2287cd70ec2b00c4e432a46c37e357fc.exe
-
Size
235KB
-
MD5
3feeb7f577c103331bfbda98b277ad51
-
SHA1
3a765c4134d9e4bfe3b183d73ee4ba019f36950b
-
SHA256
b84e1db35ad727baa786e3be053842ac2287cd70ec2b00c4e432a46c37e357fc
-
SHA512
7aa4a2451fc557d422d0ae6b5415fda1e409dbcc8c14bb47eb9399b6fb9f7a58ffe74a04cfc82e4e4ab91116d757b9a5e84ff4c6c4e751211a0e3f0581045ab4
-
SSDEEP
6144:sdeLBJlFruKcmHmBs2oSuMfT+WWhNw3Bxxpj7diQ:sQLBJlBcZo6fTyhIRf
Malware Config
Signatures
-
Detect Blackmoon payload 2 IoCs
resource yara_rule behavioral1/memory/1408-55-0x0000000000400000-0x00000000004E2000-memory.dmp family_blackmoon behavioral1/memory/1408-56-0x0000000000400000-0x00000000004E2000-memory.dmp family_blackmoon -
resource yara_rule behavioral1/memory/1408-55-0x0000000000400000-0x00000000004E2000-memory.dmp upx behavioral1/memory/1408-56-0x0000000000400000-0x00000000004E2000-memory.dmp upx