General

  • Target

    21bc590eae4eac2897059f191ceeb0d291bdcd543a6e51263e71d9215f4c7f4a

  • Size

    9.1MB

  • MD5

    c6d5cc79d77871dfe87df8c798801405

  • SHA1

    bbf1168962879bb28b45a1ed87a1b7e8cb5b6ccb

  • SHA256

    21bc590eae4eac2897059f191ceeb0d291bdcd543a6e51263e71d9215f4c7f4a

  • SHA512

    2372bead8124ef252e9aab74cc9c4c920b4485aaa678c2305776f513d928b5b9126bc95e1300060e0e1bd9488ec2a93ce10273d287446982ac3fb3de0c74db42

  • SSDEEP

    196608:JXlNay8qC3AHRByAekfKhhxP4s79IFy7v3t6dERs5WvEzD1XFg4oxk15oqdpxhib:d3c3AxBypkA4suw7/Hu5hFeHk7/MWjy

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 21bc590eae4eac2897059f191ceeb0d291bdcd543a6e51263e71d9215f4c7f4a
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections