General

  • Target

    JC_18867ac8a7d95cc3445b06d503b241375700be59e49ab3b79a603cf4181a1d37

  • Size

    9.1MB

  • MD5

    4382f8d311b79c33671f3c5030780c7c

  • SHA1

    1aa969300b5bd776e6854da10e4ba911e82c6b50

  • SHA256

    18867ac8a7d95cc3445b06d503b241375700be59e49ab3b79a603cf4181a1d37

  • SHA512

    d5b56d442943660f3bbc8221abe3457ae25ec32708ffeb57d1ff64b32d6ea25dc99162c8d1984aeab7958a2bb5b2f379a425263e58790ef7f04d470113a5bb3e

  • SSDEEP

    196608:DUkyznhEcaz8IsJrcy1hrpcdy8dUC5VQnJDbrnJIFt+WRNChvIKuIeOXcrkJDjt1:Ejhaz8rRcUpfIVgTJIFtbNC2KuIL7tuM

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • JC_18867ac8a7d95cc3445b06d503b241375700be59e49ab3b79a603cf4181a1d37
    .exe windows:4 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86


    Headers

    Sections