General

  • Target

    9394c5ce2e81178a04eb24db86ce2c39edba9615b5987aa83281adc670cb07da

  • Size

    9.1MB

  • MD5

    8ce8bda1198be99fc49f8e0e5e506ae8

  • SHA1

    256b50d51382d8b2ce8b719d7b483879a7f2114b

  • SHA256

    9394c5ce2e81178a04eb24db86ce2c39edba9615b5987aa83281adc670cb07da

  • SHA512

    6aac46f237b974ab458f8aade6c61b443968fda6a5d878841dee703f5be55f525d2d3038e020aba65bcc5cdab81e13cf6ac25b1180c88cff5ff3c2afe7c2b2bb

  • SSDEEP

    196608:2XlNay8qTWiE8UJ0ylrkQtOx6Xggu94UW05E0rX8BiYuXIybwAfWnbnoxk15oqd4:q3dXE8UqyhrtOWdn2OqXPbhfaIk7/MWO

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 9394c5ce2e81178a04eb24db86ce2c39edba9615b5987aa83281adc670cb07da
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections