blackmoon | NEAS[.]c4c2ff8ac577372d929f33b09a73bb80[.]exe

General

Target

NEAS.c4c2ff8ac577372d929f33b09a73bb80.exe
Size

9.8MB
MD5

c4c2ff8ac577372d929f33b09a73bb80
SHA1

a45b3bcf42423375950937903fac4c3d471881e9
SHA256

298c836d6c670b8703cc3fd4e2a2b5083bbb44cbb1c950b107e8a62e3328ebe5
SHA512

08bf25eecdc42c6be7e1c1efe95646dee0d33b7c3f7919f2d7512f03870a51a25f4715987a0c3962420fd273156af5dcd2c624e21a41b3dc96ead712825c1f19
SSDEEP

196608:K2c1uwl1CPwDv3uFhi43v13uFnCPws8S/VW08Sr8lQeY3YgOFmknGzwHIPHd9DPK:KnEwl1CPwDv3uFY43v13uFnCPwa/VW0E

Score

10^/10

Detect Blackmoon payload 1 IoCs

resource	yara_rule
sample	family_blackmoon

mimikatz is an open source tool to dump credentials on Windows 1 IoCs

resource	yara_rule
sample	mimikatz

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c4c2ff8ac577372d929f33b09a73bb80.exe

NSIS installer 1 IoCs

installer

resource	yara_rule
sample	nsis_installer_2