Analysis
-
max time kernel
140s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
27-08-2023 05:22
Behavioral task
behavioral1
Sample
0b5a38686298fa934b29d286ec1a3116eec58dc0b0a854edc5436bf3489819a4.exe
Resource
win7-20230712-en
windows7-x64
2 signatures
150 seconds
General
-
Target
0b5a38686298fa934b29d286ec1a3116eec58dc0b0a854edc5436bf3489819a4.exe
-
Size
1.1MB
-
MD5
cce507882e152dc5f7da147d2f3c8a95
-
SHA1
8799137137c3b7e2cc913e515e70a1a47dda8f8c
-
SHA256
0b5a38686298fa934b29d286ec1a3116eec58dc0b0a854edc5436bf3489819a4
-
SHA512
666ab74446b4e88e4474c28d4a1a1d964c2bc6ce852692c5d1ce7c5cfef8812fcbd33fd363dec7f2fe82c9e0e4fb1892d43858f2556dd0470a351580f5ecb26a
-
SSDEEP
24576:HfdQ0YYcAlO4kwU+sjzAqJ3rJ2o2MoydezzMgCS5X:Hfi0HlOHb+sIEndezIgCS5
Malware Config
Signatures
-
Detect Blackmoon payload 6 IoCs
resource yara_rule behavioral2/memory/4164-0-0x0000000000400000-0x0000000000533000-memory.dmp family_blackmoon behavioral2/memory/4164-1-0x0000000010000000-0x0000000010080000-memory.dmp family_blackmoon behavioral2/memory/4164-2-0x0000000010000000-0x0000000010080000-memory.dmp family_blackmoon behavioral2/memory/4164-3-0x0000000010000000-0x0000000010080000-memory.dmp family_blackmoon behavioral2/memory/4164-4-0x0000000010000000-0x0000000010080000-memory.dmp family_blackmoon behavioral2/memory/4164-5-0x0000000000400000-0x0000000000533000-memory.dmp family_blackmoon