General

  • Target

    97965d11dbade8a7b2f5baf8b151e549b97b292007f84841c5d2e267686f0245

  • Size

    9.1MB

  • MD5

    4f7597ab5260209e31b240460e13fb5f

  • SHA1

    d3c4d4402a2036b1d9a7fe0f0efd1cbe3260718e

  • SHA256

    97965d11dbade8a7b2f5baf8b151e549b97b292007f84841c5d2e267686f0245

  • SHA512

    35d70239b23f15d2f8ebab9c5dbc155ba37796c4e437aedfb5998e0b1231560026019751655737ca0fac3e59f36a41981ef1ddd191b3508e44a3b7d9e2574c3d

  • SSDEEP

    196608:0MM5NNRmAFvidkmPOKTiI6fG5+Jk4EU05E0rXctzCkDqK64Cp5dfU2qBFyx2ucg:0RvmyvidBPJnehEUnftzZDbPCpPjxxPc

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 97965d11dbade8a7b2f5baf8b151e549b97b292007f84841c5d2e267686f0245
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections