General

  • Target

    a20b6535f21e795ca2d9d11a24b1785d003a75afe6452b71bba74e10e2094b60

  • Size

    9.1MB

  • MD5

    71d6ad388e9d97f8390aa4f990e90140

  • SHA1

    7f009fa9b8921047fb4aabfc2aa5bcb7a4505adb

  • SHA256

    a20b6535f21e795ca2d9d11a24b1785d003a75afe6452b71bba74e10e2094b60

  • SHA512

    ff4418c7093c05c09286fa8c235a715d2c0b1d927c309a4acce7230334c0f8c5d89854bcf54dbc4f413eb6149a1e7fab920fa0145fba4dc335e32e3c1cf1add8

  • SSDEEP

    196608:fUkyznhE8sPQKQ+7p7QuS6lFrISLMb/Ujs9EkTZpLR/z4PoyQ3w3B3SAhp8bbVFf:4jMPQKR7GN2fLvpkTZRVz4Pk3mhQDoXF

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a20b6535f21e795ca2d9d11a24b1785d003a75afe6452b71bba74e10e2094b60
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections