General

  • Target

    NEAS.50aa20ff18177a1a222f7fd916357a10.exe

  • Size

    102KB

  • MD5

    50aa20ff18177a1a222f7fd916357a10

  • SHA1

    81106e3d65a5732826dca58014e3ce14c7c4be5c

  • SHA256

    c48a0e6ad203f0e315d609bbb0c294efb96ddb16a3f9f7e201d5d1f222c89bbe

  • SHA512

    d3f01950f317f97136ce2f2885fabed58b4a28d9dce95b40161fa1514c49d79b35d9f3f299af299527b2358d0fb8a7aa6a203ee484434adfaa042d0538dff61d

  • SSDEEP

    3072:AFAVjjtiB6TbWyKnI7I/maBAz47VI90uqe9:ASjjtU6+a7I+MyIq90uqe9

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.50aa20ff18177a1a222f7fd916357a10.exe
    .exe windows:4 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86


    Headers

    Sections