General

  • Target

    NEAS.9a5ac87b832949068baadb80c8c1d160.exe

  • Size

    79KB

  • MD5

    9a5ac87b832949068baadb80c8c1d160

  • SHA1

    a2b37fdd0adbe1447722d2a4b7107afb5621e114

  • SHA256

    44151368ee873289b2f4a5694a936f801e3d5c77468f96af9f0758a06e8d342f

  • SHA512

    c7133c72063d62ff79274710adfaa629987e3f2b7fb4395e8c62bb4f6cef297bf020fc1b6d7bb41a05ca7780b0b245f3a78bde72c7b07f9d3ebfafcda0fb53fd

  • SSDEEP

    1536:/sVVtjAKqURk0Ex/tIWLSYGc5cmFF+TTdGka2dQe5GrpXLT:/+N1qURFY/RLSO5cmFY9GMdKf

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.9a5ac87b832949068baadb80c8c1d160.exe
    .exe windows:4 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86


    Headers

    Sections