General

  • Target

    a8a2c05606db0b08fd77dfc4fb96728160cd786860deb6d31018825648e9ffae

  • Size

    432KB

  • MD5

    1ec07a06295fbd106998f68f81035292

  • SHA1

    9344788b70d9e4be55aefcf7fc031834463582ef

  • SHA256

    a8a2c05606db0b08fd77dfc4fb96728160cd786860deb6d31018825648e9ffae

  • SHA512

    922bff3a99501c286450982eab6b5375c9b4833c8090f661a1bb93eaa3a6bc6ac60589a2d91bc11e1422c41ef52629502af3980cc02cd28dcaf567fe2d90024f

  • SSDEEP

    12288:kov9YJjrV+pJR6cuXFqaYCL9yKASIAcl3hkWWlyvQO:B+JHVyR6xXky0KASbcdh6yvQO

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a8a2c05606db0b08fd77dfc4fb96728160cd786860deb6d31018825648e9ffae
    .dll windows x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows x86


    Headers

    Sections