General

  • Target

    575a8732e9a386b50e6a5bb223a04048b64133448ed8183d5db041261d1d9f97

  • Size

    431KB

  • MD5

    2dfb32e64f81399b33161a70c44f06ac

  • SHA1

    7931af63635c1f8af3dbc2189dc6492323426e66

  • SHA256

    575a8732e9a386b50e6a5bb223a04048b64133448ed8183d5db041261d1d9f97

  • SHA512

    03bca706e80070a814d3ad596820c56eb4f3def4954989dc06106bf97cd187199df9a8cda99bb548db3f3dcb13d7002e0f7d70d9d160c140d1f309920b68a246

  • SSDEEP

    12288:IXi0ig1VCpPgYO+TqxeqFcOH72olHki9s:IXivg1VCpZOCqxkOH7TB6

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 575a8732e9a386b50e6a5bb223a04048b64133448ed8183d5db041261d1d9f97
    .dll windows x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows x86


    Headers

    Sections