General

  • Target

    5f39daa7e0bbce80fd66b9cefde88032eb8a14d2e98a7031c2c849ab22fa5d3f

  • Size

    856KB

  • MD5

    d56cec5f847a4e075d05925560dac182

  • SHA1

    fb666c645575960cda418cd4f3662865099a05df

  • SHA256

    5f39daa7e0bbce80fd66b9cefde88032eb8a14d2e98a7031c2c849ab22fa5d3f

  • SHA512

    4b3375b43b4b9f0545724f6269df8aa6fb740e28d8c400f2e45ae743a921a7d006c722e02c46536c29c86997cc3f5d2e4d3788bb11cc3eff671ec36abc72680b

  • SSDEEP

    24576:OFs9imJumWV/rAP8MgA7NWLaHRieR0pB/wG:70muMlgA7NiaHRieGpB/T

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5f39daa7e0bbce80fd66b9cefde88032eb8a14d2e98a7031c2c849ab22fa5d3f
    .exe windows:4 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86


    Headers

    Sections