General

  • Target

    局域网复制 xx.exe

  • Size

    240KB

  • MD5

    6284fc2948caee174a9f3ef63a3b710b

  • SHA1

    5273f42de4e14b7457754eb868de05e3b821d4fe

  • SHA256

    61ccdf8cdc2229f2c43c8e51bc1be36a67cd7c071f20c30ca525b9a159b606b5

  • SHA512

    590994b4134a5fa329a7f4fecdb6ca4e9770b52409582a68191723d5374715657c1c3a37cc6d949fcc22b901a61a484a98a07d3dc2211851d72e29da011b85b7

  • SSDEEP

    6144:1B8pRFGJSRSs7/62JE4FgORTy2wCB20E/wcFwDKMiD9HRI:1CpawD69Hq

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 局域网复制 xx.exe
    .exe windows:4 windows x86 arch:x86

    cf06f5ca6cface45fea69971d742e72c


    Headers

    Imports

    Sections