General

  • Target

    c61772cbf02907752e3af5f146caeee58084257deac1272f78f81cdaac738450

  • Size

    528KB

  • MD5

    2f2ebbcc1966d3bc7b601d3fe788305f

  • SHA1

    ef88a709255db2388fa9b8e12f0c611a8146cc8a

  • SHA256

    c61772cbf02907752e3af5f146caeee58084257deac1272f78f81cdaac738450

  • SHA512

    274c224c2a53c4c9d8b4c5db36f59a05a916b50ae9e81d64252cf3e3ce69a2c37b16793786b36e30e24b82208a4c949143f7b8b3d2f54b899dc17db361efcd9b

  • SSDEEP

    6144:M1AE/tWQJA7jr8BP1+ed/6EYZc5tBxP4:YAE/tWQ66P1JD

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c61772cbf02907752e3af5f146caeee58084257deac1272f78f81cdaac738450
    .exe windows x86


    Headers

    Sections