General

  • Target

    cc15a4efce217353b6951bb9e3d810921821d939ae67e212bea84fce01226265

  • Size

    431KB

  • MD5

    761750d765a3663d5b7f039dd1c0cb9e

  • SHA1

    1b6ca41b7662ce3dbe8db78a59ce6ce49875d9ed

  • SHA256

    cc15a4efce217353b6951bb9e3d810921821d939ae67e212bea84fce01226265

  • SHA512

    af218530bdbeea4f2b407d7ac4f45224df4ae5987cbe7500dcf92dbd870497d52a35f4bef7258113b99636479518fe2bee822076fa01fafd1fb70d941b132bc4

  • SSDEEP

    12288:IXi0ig1VCpPgYO+TqxeqFcOH72olHki9W:IXivg1VCpZOCqxkOH7TBA

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • cc15a4efce217353b6951bb9e3d810921821d939ae67e212bea84fce01226265
    .dll windows x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows x86


    Headers

    Sections