General

  • Target

    fcbf79d2252945bf9eeaf956b98dcfff0709e0eb9c9c593893402728c70c175f

  • Size

    655KB

  • MD5

    a929528c1740172d5072b41f02cafc50

  • SHA1

    58090aa0a94bf6511e2d727fa42a392393e4771c

  • SHA256

    fcbf79d2252945bf9eeaf956b98dcfff0709e0eb9c9c593893402728c70c175f

  • SHA512

    6e86c533496ca027fc8ab9fbf1bbf48af03bb37557d2e68c91761aca24995ead7250916c39a13554d3b1b93d0a7a136852ac0fa7018eb685866384abdc8dbd35

  • SSDEEP

    12288:eYRQQYRCxN9j+k3ouU/z2/xIwpB2VbIxSfy+Btwx49Kw8Rin9SRJRLApSC:hQ9MxTj54/yxjpB2VbI2Ly+Kw8RinYy

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • fcbf79d2252945bf9eeaf956b98dcfff0709e0eb9c9c593893402728c70c175f
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections