General

  • Target

    1fc53b4e1c2b5985aad20d11b7a0fe2f69b611c4b0bb6bc7bed1cabadbe93b52

  • Size

    1.5MB

  • MD5

    89b54fbbaeb1a893f3eb89e0bca6222e

  • SHA1

    b3f662fd61df9c0fc27fc5ef5bac12a0ede6b90f

  • SHA256

    1fc53b4e1c2b5985aad20d11b7a0fe2f69b611c4b0bb6bc7bed1cabadbe93b52

  • SHA512

    8954b52254fb7e0a6eb7623f6f3116acd7ef418cce2ee72c41856a1d68f21874a32c7d9371fdf8413c636ee7a1755bba1268bb193e5ef5ccc426a7a0ad626a03

  • SSDEEP

    24576:jSxNAaQ65ahei7213NIet5/uBZdK60lDsACckUXSUP56u1nGW/AaTKg+r0uirw+y:jcyaQbMi7+dIet5/uBzK60GzckgSUPkH

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1fc53b4e1c2b5985aad20d11b7a0fe2f69b611c4b0bb6bc7bed1cabadbe93b52
    .exe windows:4 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86


    Headers

    Sections