General

  • Target

    dcf7ad133468d71d8b15cbca860c8e4c3f7db6f23e6f0b7f3c123c414af1bd04

  • Size

    15.6MB

  • MD5

    117664e043e557fdd157a1c224dd3332

  • SHA1

    0e2e4e95db9e539242df47b6c50ee940acdb7c5c

  • SHA256

    dcf7ad133468d71d8b15cbca860c8e4c3f7db6f23e6f0b7f3c123c414af1bd04

  • SHA512

    1b13d14b78e023431a8451c069477f6f49249fdaf3079ee888fb9c36e58b21847542f957df2efc512880afbc7cf20c3542d25bb26fcaf0f1c04b4adde1f8ae3b

  • SSDEEP

    393216:P7pM2nNujASSzzY1YiwrUW4gdLVUvXWpkq/a/L2Nn:PvNMATzsPuUWnLVUvXwkga/sn

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dcf7ad133468d71d8b15cbca860c8e4c3f7db6f23e6f0b7f3c123c414af1bd04
    .exe windows x86


    Headers

    Sections