General

  • Target

    0697f301cca39facbd4dd1cfccbab950_exe32_JC.exe

  • Size

    89KB

  • MD5

    0697f301cca39facbd4dd1cfccbab950

  • SHA1

    27ddc6ca0bd9716cc313cb642b566c5bec9cc32e

  • SHA256

    b6d69ad8adda4b99544e89d02b9f6aab219ee665468ee63a94d9314a04f0fa8e

  • SHA512

    1530ff1bac82a8055e0eb69fa37a11c88e73acf85a6fa7e7d058b867fa4e54e38d4f04d6a8aa1688ac14899e4775373776716e3cf1a469fe299e2d62bda7d591

  • SSDEEP

    1536:EF7p8VeHwYaBlAvXhRDtxY11686va0QgE9gHgMVnvLiDXs+04j9:K98VNTAP3BW1k81cLAUvLiDXs4

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0697f301cca39facbd4dd1cfccbab950_exe32_JC.exe
    .exe windows:4 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86


    Headers

    Sections