General

  • Target

    198ccf659e706d5f4ea48275071fb71744738e6d3c80b30978a867e811452813

  • Size

    9.1MB

  • MD5

    62742039f2ba96b1fbd7334047b021cd

  • SHA1

    8a38fef93c05a766fec8375d5fb9070ef20650a1

  • SHA256

    198ccf659e706d5f4ea48275071fb71744738e6d3c80b30978a867e811452813

  • SHA512

    184e3ad3f076c494ea8fcad4e4b6101e9063c8def65f54b4caa8c3c24aa938260dfa6d1440c70f5540ebd066c264762a080143cef9808b63452f762a413c4282

  • SSDEEP

    196608:qUkyznhEJ3GaIRCY2bT6TTx1XOZ1AnTBMJYkTRj7zypx1zQiTy/YdR+:fjJaIRCYESxtcAHkTRj7zypW/Yv

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 198ccf659e706d5f4ea48275071fb71744738e6d3c80b30978a867e811452813
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections