General

  • Target

    NEAS.e3015262543ef0d5a1e20df98062a9a0.exe

  • Size

    87KB

  • MD5

    e3015262543ef0d5a1e20df98062a9a0

  • SHA1

    4b421be40d73b813380db6d0e455ced613a7957b

  • SHA256

    feea93acfa2250233b3c15124284885883647cb46b74e95384a068e17c8f2733

  • SHA512

    3f8b6244da8febf01c35ebe89d0302e945d7d95ffcad52cb046c09af54ad9b2f12d08d6ccde16d61885f7a66cdec7f08b248a641d9faecb482c4e896f0b34969

  • SSDEEP

    1536:EF7p8VeHwYaBlAvXhRDtxY11686va0QgE9gHgMVnvLiDXs+K:K98VNTAP3BW1k81cLAUvLiDXsP

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.e3015262543ef0d5a1e20df98062a9a0.exe
    .exe windows:4 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86


    Headers

    Sections