General

  • Target

    cb10906e7583545bb9aad837c872f512abe6b1f59f41974525500c9fdfb4e35c

  • Size

    28KB

  • MD5

    ecaed7ae2976825099b3ba1a5c936c54

  • SHA1

    38082a749c491c7361f6c7428444f3fb741abbee

  • SHA256

    cb10906e7583545bb9aad837c872f512abe6b1f59f41974525500c9fdfb4e35c

  • SHA512

    739511e33aa885da884896241fa6758f047d208bc3a87497c56540de0e4c0b4740805c2f53ae5bb9fd517d0da3e7df221be014d4d164631b7bacf1498cbc90a3

  • SSDEEP

    768:PtsQhW92JEGeE186GlE+gJ2DS3b11Qh8KDom:PtsCe2J7x2DSRmh8K7

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • cb10906e7583545bb9aad837c872f512abe6b1f59f41974525500c9fdfb4e35c
    .dll windows:4 windows x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86


    Headers

    Sections