Overview

overview

10

Static

static

10

dbbf5d66cc...7b.exe

windows7-x64

10

dbbf5d66cc...7b.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    dbbf5d66ccfb04a0a0d5c11fbbcb6b289a95edae36959d75aa06fe0d6a71a97b

  • Size

    4.9MB

  • MD5

    bcef4e72977a252dee1e6ff9d4e4157f

  • SHA1

    9b0f77535e8a40277bb9f003da05d4d1def98eec

  • SHA256

    dbbf5d66ccfb04a0a0d5c11fbbcb6b289a95edae36959d75aa06fe0d6a71a97b

  • SHA512

    a6bc5b157f18e244778fde5a5b608b4a4495e58373e24efb085c106616d579ed69e2fb557fcfb9290a86fecc0aa0ff3a37ff3a202dfa2c308db6a30e2098bc89

  • SSDEEP

    98304:7mJGZmwPjthfYeMuZYliJnNZBTIk4lwHzjn6ZMMp7/E:jbPHe8J1kkcMzkM67/E

Score
10/10
vmprotectblackmoon

Malware Config

Signatures

  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 1 IoCs
  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dbbf5d66ccfb04a0a0d5c11fbbcb6b289a95edae36959d75aa06fe0d6a71a97b
    .exe windows:5 windows x86

    8f36c4f9fb5d59f6ef7356ff4d05100d


    Headers

    Imports

    Sections