General

  • Target

    NEAS.389170cf157574598d51d72a2532b7d86172c808ebd81f80018f2024b29c17fb_JC.exe

  • Size

    9.1MB

  • MD5

    3437610f7bb386202ae238ac4a2aed2f

  • SHA1

    d4374a3d5c65f9d3aae7bdfcc926caaf64964886

  • SHA256

    389170cf157574598d51d72a2532b7d86172c808ebd81f80018f2024b29c17fb

  • SHA512

    a8863c5d19bb025e7b4d05d4ad22214f6f7a2735df210ceb2036f5192fe5958f8ac2d6550f9aca561ade0ad5994864e814f77345341c1c1d3e1bf902085f97c6

  • SSDEEP

    196608:NUkyznhEwYsxn26/+7jOUx5QXv/gihOtE1HLX2DimUoQqusvqI6o5CuuQouJG6w9:2jjYsNvW7j1HTmC6x9svq/ZuBoAmCjM

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.389170cf157574598d51d72a2532b7d86172c808ebd81f80018f2024b29c17fb_JC.exe
    .exe windows:4 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86


    Headers

    Sections