General

  • Target

    12990e46ff89bbf3dd59e68a21e07e5083c1fecd2640894397b8ca335b00cb1c

  • Size

    22KB

  • MD5

    b8015c19d8725d477055e2ce232140ca

  • SHA1

    37a2b8dd9d9286d72cda7985b98ed318ea2fbf51

  • SHA256

    12990e46ff89bbf3dd59e68a21e07e5083c1fecd2640894397b8ca335b00cb1c

  • SHA512

    9cf140c7f1cc93771036e4f166092eaaf0a1b9c347f14fcac30fc0cecc8934fc56aa6963d0a6c68ba85f9f13732b3914a9aadc3f607d7c837223472aef0f2ebd

  • SSDEEP

    384:Vagl1GWfy1gWULRvHb2k/V3sNPoSlY7LJHtE8Rt3y+vs3fQQdQi8d0PcLTLgNDL:Mgl1GEy1gWUtvHbb/V8N01NEo3bU/K0F

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 12990e46ff89bbf3dd59e68a21e07e5083c1fecd2640894397b8ca335b00cb1c
    .exe windows:4 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86


    Headers

    Sections