General

  • Target

    faba5a6c447fcd195136e9df835ff086b32bf4867770f9b822af0b188c2654c0

  • Size

    528KB

  • MD5

    0d4ffddeb577396f3a0e3500638ccec4

  • SHA1

    dc504e76bc71c8709e341040a2ba390a8a60acb4

  • SHA256

    faba5a6c447fcd195136e9df835ff086b32bf4867770f9b822af0b188c2654c0

  • SHA512

    68a47b96fa29744d120744632d62ad5a035ef809fd4a0db18c757d933373cd9d8c459f298bcdcd5980eac7f52e54b57397e8641ef59e0d0acac40de6f12e12d4

  • SSDEEP

    3072:HPCLCnc/GBfJbUiJLrcU+lWa4jGA8Mfrm93uRGkfWnufj6WjIDNL:vkCc/GBbbJr7jr8ArWQWy2

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • faba5a6c447fcd195136e9df835ff086b32bf4867770f9b822af0b188c2654c0
    .exe windows x86


    Headers

    Sections