Overview

overview

10

Static

static

10

d1148a418f...7a.exe

windows7-x64

10

d1148a418f...7a.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d1148a418fa6b468fe1fb88cee9d7808d52329891ac91b4844f2e5c6fe84077a

  • Size

    5.0MB

  • MD5

    507051071f713a862efed08afe73e353

  • SHA1

    c0deb7f35f33677856bafb174d76eeabf69fd807

  • SHA256

    d1148a418fa6b468fe1fb88cee9d7808d52329891ac91b4844f2e5c6fe84077a

  • SHA512

    33df3f29d752186c2636c2e5ba6a7c6a363ea1da31651597c094d0b55f27a13d6c41a3af1f29b430f933e0f90ea96d4360b0f16aa12176019410d8dd71d2f411

  • SSDEEP

    98304:aV4ZKUFuT6AfqkpAsKNRIdzdGl+Aqoupqdi91rEsf0:dxSKxu4e/1

Score
10/10
vmprotectblackmoon

Malware Config

Signatures

  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 1 IoCs
  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d1148a418fa6b468fe1fb88cee9d7808d52329891ac91b4844f2e5c6fe84077a
    .exe windows:5 windows x86

    8f36c4f9fb5d59f6ef7356ff4d05100d


    Headers

    Imports

    Sections