General

  • Target

    4caed7de787af5c26e5091a2733888d5af8605b5851c5f177273b452eb7b02c4

  • Size

    2.2MB

  • MD5

    abde7ddcc7dca86700ccf9fd3fc25b11

  • SHA1

    e2fabf760f8558db2b2cfcd0fda66948e74e7839

  • SHA256

    4caed7de787af5c26e5091a2733888d5af8605b5851c5f177273b452eb7b02c4

  • SHA512

    a5f7e5e7315701e07b64f3e6a5b5623f9eb31de61ca0de53c0456ed202d341ca839f9e3c6eb41dbae5dd5ddba7d28cd263e3c76a48b53591ba2d5573fdca44a5

  • SSDEEP

    49152:+CLOU+wrjsfGpHgd1tEQh+h9IbiNFxs459IkdKgNgNdzaXK8o2BJt9P66VlRyB:+SLAd1OQh+hwifJIkdRNQGXK81BJt9PW

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4caed7de787af5c26e5091a2733888d5af8605b5851c5f177273b452eb7b02c4
    .dll windows:4 windows x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86


    Headers

    Sections