Overview

overview

10

Static

static

10

ca5854fd8b...0a.dll

windows7-x64

1

ca5854fd8b...0a.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    ca5854fd8b180797943a08354bd12b5c2f236fb44d21e954009928e5b815bb0a

  • Size

    156KB

  • MD5

    a0bf0abfbc2319efbaf99b5cc402c659

  • SHA1

    be7a2a5d7a06ed336f41c0a862310b3952f86926

  • SHA256

    ca5854fd8b180797943a08354bd12b5c2f236fb44d21e954009928e5b815bb0a

  • SHA512

    04dfc880ae6ba16fd0784f15e2a30a175da5a86e94f61e72a861e697729ddddac03c58381670e8ab1f21c6335cbae477aa78f524bdb033483caca55b83de512b

  • SSDEEP

    3072:eyjNO0zYRNfIZu0tVaYxcSe/Qd97ADGlW1b+WxqGNA:e30Ujb0tVaYxjR9UDG2b+GA

Score
10/10
vmprotectblackmoon

Malware Config

Signatures

  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 1 IoCs
  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect

Files

  • ca5854fd8b180797943a08354bd12b5c2f236fb44d21e954009928e5b815bb0a
    .dll windows x86

    4be54fa93239a8572a0533e12e59ed79


    Headers

    Imports

    Exports

    Sections