General

  • Target

    d06ee3b8fbd9d83060194bd7b9cad5d4c87cee634743b17c678894bad61f3257

  • Size

    9.1MB

  • MD5

    c88f1f6772242df047c2d96d954b91fa

  • SHA1

    2385c166fc66077044bea507f9621f796ec5c0a9

  • SHA256

    d06ee3b8fbd9d83060194bd7b9cad5d4c87cee634743b17c678894bad61f3257

  • SHA512

    5dfee473657ddd5e72aa5c43109782c4b44e6bebe3901824cc268fbbb3e472485bc490820c3cf5ac5b9e7bad9138d103e0c94c91d0879b9c1c23dab166c3756f

  • SSDEEP

    196608:gUkyznhEsI6YBGyjJblzNcoH/ow7WqJDVmGWT6IoGvNHOCtcTGF6TKgTLS/Sie5P:NjvI6azjnTQYVmGWTPo4HOScT26GgTLZ

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d06ee3b8fbd9d83060194bd7b9cad5d4c87cee634743b17c678894bad61f3257
    .exe windows:4 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86


    Headers

    Sections