General

  • Target

    5ddc9aee0541c9b9aea8c5b6b00c467beb4f180e829c49783d505a3732d6ead7

  • Size

    528KB

  • MD5

    31e79cf5440feeddc45e7114d066e4e4

  • SHA1

    aa011dcb2934d64ba83cb3cd757615ce0f71289c

  • SHA256

    5ddc9aee0541c9b9aea8c5b6b00c467beb4f180e829c49783d505a3732d6ead7

  • SHA512

    5b2c6bd495968f5def492f7a8d33d42dbd0e3c3aab146cab268c0e92d822075351aade57490889ede8abfee433aaf08d3979fc9fd669502433b9372d511d1c3d

  • SSDEEP

    6144:M1AE/tWQJA7jr8BP1+ed/6EYZc5tB/P4:YAE/tWQ66P1Jd

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5ddc9aee0541c9b9aea8c5b6b00c467beb4f180e829c49783d505a3732d6ead7
    .exe windows x86


    Headers

    Sections