General

  • Target

    5afaf6bdb5d426017c3436275516640f22b7a24a97b5913686ea2313f2525ab5

  • Size

    3.8MB

  • MD5

    0d3693d6447ea3c4d679b1df7de8a810

  • SHA1

    0e333647b94bc7b6e61dfc6e8de4899bcddc13d4

  • SHA256

    5afaf6bdb5d426017c3436275516640f22b7a24a97b5913686ea2313f2525ab5

  • SHA512

    af220b8908bc8ea49e19ba5c4d6bedde1deb839acfc6a6d9643b93e58ee36f1709cf46d79a9dbb6ec278613c753ec8309e02c511541851e77e0c239c5b8dc0ae

  • SSDEEP

    49152:hzBt2k8dMqL9u8OWrgfF5T2yVM8FW+kjHYs4sOFA6+G/op:AM8ORfF559V1s0/op

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5afaf6bdb5d426017c3436275516640f22b7a24a97b5913686ea2313f2525ab5
    .exe windows:4 windows x86


    Headers

    Sections