General

  • Target

    653ab3e59645ca9c1067c5bd3f4dcf00.exe

  • Size

    7.3MB

  • MD5

    653ab3e59645ca9c1067c5bd3f4dcf00

  • SHA1

    b13fa9f91e2581173f4fd467ce750f0acc832b11

  • SHA256

    7d25b4cbd88b49eda76adfa4331a3bd63cb04fb25a69509a4f69014575178715

  • SHA512

    0ac11b6ba1076adb1b8fa988bc4d29a0df09a3d0f4618100ec09c73b39464a0db587b1cf792e5e28d754546282912418a1b5d93b7fa28af90eaf27d6b462f890

  • SSDEEP

    98304:TRoeO6XTBJYazImknGzZr+HIPFtmOZ9G17xwFB5URUSKnaSOdroSCa:NoeO6XTYxmknGzwHIPHd9swFBubKT

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 653ab3e59645ca9c1067c5bd3f4dcf00.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections