General

  • Target

    NEAS.d7a1d02c5a0775721dbd12bfc802cd10_JC.exe

  • Size

    96KB

  • MD5

    d7a1d02c5a0775721dbd12bfc802cd10

  • SHA1

    4d504c755ff924f51ad8949c6423c196637b60ae

  • SHA256

    b14194b8586687b580d6e28659ec02905e7877eafedbe4322693ad467ba4c4d5

  • SHA512

    e6e9ee2fcd1b33d2142486b857a7a4af3801936fc5e3afab5677db3de8d4b082ce23347555a38813499f998b8b634ac638014b961b58b56686aaad23020f73e1

  • SSDEEP

    1536:Q/vTGudTe5k4Lo8KI2Z4yNcR5Mpk7WO9f2zXGYxTIx9JL8IoQ6CqZphk/:Q/bhOrBKIq4XR5Mpp+fw2CIx9JLYpk/

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.d7a1d02c5a0775721dbd12bfc802cd10_JC.exe
    .exe windows:4 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86


    Headers

    Sections