blackguard | 0x000900000000e621-6[.]dat

Resubmissions

20/10/2023, 03:44

231020-eamyladf5w10

12/10/2023, 14:31

231012-rvnrvagb5810

Sharing

Copy URL Twitter E-mail

General

Target
0x000900000000e621-6.dat
Size 1.8MB
Sample231020-eamyladf5w
SHA256 c50a943a78dc0049438b810fae2973ade0350c6ad76f924348fd56daff9fdf3a
MD5 8bbaf95337912b8a1d36594e5bb2f5e6
SHA1 5db26a00543868b7f7bc88ec6597a17cf0dc71ae
SHA512 3665bbbfced55b369c0a3926fbe1682c3dc80e669d33fc523b4e23c2bbbb38f34b50d04bf369d0104d71ff99c73e9cb3d525408f0f137d7e870d7dded4196620
SSDEEP 49152:RC6pCkV5+fDepJvZA0xY1aBJ4/xRmWr55h:RC6P70MJvZecQ/xEWrR
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

blackguard

Malware Config

Signatures

Blackguard family
blackguard

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0x000900000000e621-6.dat

File Explorer

0x000900000000e621-6.dat

.exe 1.8MB

0x000900000000e621-6.dat

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 c50a943a78dc0049438b810fae2973ade0350c6ad76f924348fd56daff9fdf3a
MD5 8bbaf95337912b8a1d36594e5bb2f5e6
SHA1 5db26a00543868b7f7bc88ec6597a17cf0dc71ae
SHA512 3665bbbfced55b369c0a3926fbe1682c3dc80e669d33fc523b4e23c2bbbb38f34b50d04bf369d0104d71ff99c73e9cb3d525408f0f137d7e870d7dded4196620
SSDEEP 49152:RC6pCkV5+fDepJvZA0xY1aBJ4/xRmWr55h:RC6P70MJvZecQ/xEWrR
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1909886

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

0x000900000000e621-6.dat

mscoree

dotnet