General

  • Target

    4b18c575f59b09ec520302712d291da9c6baa89919ce7799f4dfd3365b0fb9fd

  • Size

    191KB

  • MD5

    b671026b0826018f10f71e4b997ee90b

  • SHA1

    4ddbdc41ba619d956412a34dbfb62b2f608f1579

  • SHA256

    4b18c575f59b09ec520302712d291da9c6baa89919ce7799f4dfd3365b0fb9fd

  • SHA512

    577ee25355bd913d5c02f3c59f6baf024ecaeff47d5c4ad6f499d5ce968ba17be98fc6073042ac39b34c11c86790ba710a6d4ae880c312bd68eee6563ba82d5d

  • SSDEEP

    3072:88Gu5hAWk2hScUf5+yrSOFRwc+E6F1OLbeGnQ47v81QDEw3CvkFXKVPxsu/lT:8AhWm7Uf5GOjaF1mSN4jYQDNF69xsST

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4b18c575f59b09ec520302712d291da9c6baa89919ce7799f4dfd3365b0fb9fd
    .exe windows:4 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86


    Headers

    Sections