Overview

overview

10

Static

static

10

5c389d782b...05.dll

windows7-x64

10

5c389d782b...05.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5c389d782ba8878683cba8fb99528bdb13f4bd1f13fc2add5c55ded33125d105

  • Size

    64KB

  • MD5

    0c4d8b798d8c1a8e23d90354b7efbaa0

  • SHA1

    8fd2e8659a67f2deafd1bc87c1165211592ad2d5

  • SHA256

    5c389d782ba8878683cba8fb99528bdb13f4bd1f13fc2add5c55ded33125d105

  • SHA512

    addd596764375bcb8b6105042373ac2ba68d2ccf52ee4c9128e97e63c7ffdb78c57af7164c058de6c4ce2205bc8361256b3c70660768736a08fe98b916810424

  • SSDEEP

    1536:fe4yaOcnjyGLdmt6Jj7lHoTcd5TmLEro0mhKqjcNLqhl/iZ:WgOcnjyadJjRIoXywjmBj6Lwla

Score
10/10
upxblackmoon

Malware Config

Signatures

  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 1 IoCs
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • 5c389d782ba8878683cba8fb99528bdb13f4bd1f13fc2add5c55ded33125d105
    .dll windows x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows x86


    Headers

    Sections