General

  • Target

    0f3e593cb931d35b4ff945e9e637c569cec4fe3525787acb8544fc12b07e306f

  • Size

    74KB

  • MD5

    f4746cc23c643d431642480237f30454

  • SHA1

    4848d848bd67693bca3a0ce99a54148595d46aee

  • SHA256

    0f3e593cb931d35b4ff945e9e637c569cec4fe3525787acb8544fc12b07e306f

  • SHA512

    7ac2716692556e33051db7cc817c4e77ee5700c64e12d605b8220759d17f1b7eec86fc2dd7d7ec245224a76922472f6df3d53e3ee4906bdd13264bfc330f4fbb

  • SSDEEP

    1536:1vqc+BcTJrtK6q49VswO6zQEqpflQgm55umKcjBsTqIfQwKu4h:1vuCThtKv4EGq/855umKysbNT4h

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0f3e593cb931d35b4ff945e9e637c569cec4fe3525787acb8544fc12b07e306f
    .dll windows:4 windows x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86


    Headers

    Sections