General

  • Target

    1d6a9863879e2ac8a5e6e5df48bd4f3a726b4d7e5ee6e0b595853805b0d2c18a

  • Size

    5.1MB

  • MD5

    a0a3c9173e0083709550bdde54c4b6ec

  • SHA1

    264dd715c974c76b08f30011ee55e6e7d9ad5d2e

  • SHA256

    1d6a9863879e2ac8a5e6e5df48bd4f3a726b4d7e5ee6e0b595853805b0d2c18a

  • SHA512

    29d8f09bd6dae4bc9272d4d17393b88846d6ac91ffb45564672d29936da089f01ada0d996f0d993142ba1c5a68b67399b1c590c01df07aa5820d4a7c7c768d8d

  • SSDEEP

    98304:Ot0O/kQUtxUrTCrAKSCA+Ub8v5Dxq2RzQXoG3/EDA5WALwIdV9yQWh5FO3gix2hX:OP/kQUUTCrWCf04cvaDALwuwUB20gQex

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1d6a9863879e2ac8a5e6e5df48bd4f3a726b4d7e5ee6e0b595853805b0d2c18a
    .exe windows:4 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86


    Headers

    Sections