Overview

overview

10

Static

static

10

aa520d58c8...10.exe

windows7-x64

10

aa520d58c8...10.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    aa520d58c8f01579af8101091c7ce6f6bc65e792a92c75f406383832592cb410

  • Size

    5.1MB

  • MD5

    0d6f19ab118ca42435a0169878aaf5a9

  • SHA1

    b27a9792519bb63d6065bbcfd54bae9aa848f19c

  • SHA256

    aa520d58c8f01579af8101091c7ce6f6bc65e792a92c75f406383832592cb410

  • SHA512

    9dabbd3728b351a5e093a30da217b224dbc9ac25a3d1ae7dcdaef503f1e646b910eda683c38ff68cd50cc86b5a8e2a21062b942a0a56c064fcad2c4655b16045

  • SSDEEP

    98304:18RZisflvhqp1pYP8pMv3HrX3duTcCV/XilVd:4/q5YkQLXWPil

Score
10/10
vmprotectblackmoon

Malware Config

Signatures

  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 1 IoCs
  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aa520d58c8f01579af8101091c7ce6f6bc65e792a92c75f406383832592cb410
    .exe windows x86

    8f36c4f9fb5d59f6ef7356ff4d05100d


    Headers

    Imports

    Sections