General

  • Target

    29de9b3ac8bba03341eaed5e56f778f15e87e21fd491c9e16f09eb29f3a8af91

  • Size

    2.6MB

  • MD5

    fd385c3bb500050a1ad57d789c9a525d

  • SHA1

    330455acc3f745f3bce56c1c29fbc036551fdc19

  • SHA256

    29de9b3ac8bba03341eaed5e56f778f15e87e21fd491c9e16f09eb29f3a8af91

  • SHA512

    e1013654373fce589bdeed0ab3d873b6119e4eaabb02992416d825f46f3790e34f8b62fce68784a24e7623ab79610a051bfac00cb06dd9c6fd2609a3d0c5f5c7

  • SSDEEP

    49152:NehxOedIU7nAOXIt2tlixVgKF6M+/kuGk5hfephoAoaBZy2CbgFZSDRzVa5hSjC:Neh8edn7nbItMliXgKFN+fHshL1TqgFl

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 29de9b3ac8bba03341eaed5e56f778f15e87e21fd491c9e16f09eb29f3a8af91
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections