General

  • Target

    1870d7e9fb40b7b3bf96340a9abfcc6f12314ce99f439bedc733345fe7ba70db

  • Size

    9.1MB

  • MD5

    212421d0716905d5f4a0ba79e89fa1a6

  • SHA1

    f1cb58381f0d7fd0b45f6f633a0bdcd91b28e0d2

  • SHA256

    1870d7e9fb40b7b3bf96340a9abfcc6f12314ce99f439bedc733345fe7ba70db

  • SHA512

    1a2f5fe047c6fdaa8a8807e7df006a2d2f7988e68afdeb04b8bb3817a74d6eb48d3cc9ee74e69fe52623b9beb6679124e49f9652e3af09ceb211a562654aaecf

  • SSDEEP

    196608:QUkyznhEie5k3UJlXRhGb2X/Mfvfam8UoTH20c53iB/lOFEIEiUkvRkZp5GY:9jNe5kkzRhGi4kUqH20c5i7hSUkvEy

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1870d7e9fb40b7b3bf96340a9abfcc6f12314ce99f439bedc733345fe7ba70db
    .exe windows:4 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86


    Headers

    Sections