General

  • Target

    7d5f7eac927cfc259b9cdcfb70dd1fdd223dded563e26989e742a01dd219ae4c

  • Size

    112KB

  • MD5

    0b15e849bdb6ae9468f4d35ec7be9898

  • SHA1

    e14e5218160b7588d6d6870640e23ee14058bf44

  • SHA256

    7d5f7eac927cfc259b9cdcfb70dd1fdd223dded563e26989e742a01dd219ae4c

  • SHA512

    2c7be986c98ee9188cb841d81bd739828c082b1dff8156c2a23cd7b7443d89816bbcf504d61ed2b22c4fbabb5e85f2c1550c1df8155a9f2e259e644a52f5272a

  • SSDEEP

    1536:umDQAQvcZa7r2lQWVJLbkRywgRQRbqMkHmL/fxez+BZf8uFDsDP3N5durjUEC0e:upvmQr2qlpgRWqMkHgE+rEP3N7GjE0e

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 7d5f7eac927cfc259b9cdcfb70dd1fdd223dded563e26989e742a01dd219ae4c
    .dll windows:4 windows x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86


    Headers

    Sections