General

  • Target

    ce8bf526a39784fecf5060983b7cc3135ddf5bb4074c51163e71774cedbb1496

  • Size

    528KB

  • MD5

    da298b7509aeb4323efdfc36e8bfd127

  • SHA1

    12f8dc01fe665a1656dd7a723c1d0904aa8251c4

  • SHA256

    ce8bf526a39784fecf5060983b7cc3135ddf5bb4074c51163e71774cedbb1496

  • SHA512

    889cc1766ac4207190b4b0fa94989cd8ec499b9484148971c139b470eb664e1b70f91fbe13fe520e4aade304d0c2a1465cb8ab9383dba18586bab29f89179239

  • SSDEEP

    12288:01c2NXL63qW5m1Luiz4ub1pkCzciqaMpJc/Qd+:0vZ+3z6LxHb1ppci5GJc/Qd

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ce8bf526a39784fecf5060983b7cc3135ddf5bb4074c51163e71774cedbb1496
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections