General

  • Target

    30b859ef6c0be1abf10e36cb98431e49

  • Size

    1.0MB

  • MD5

    30b859ef6c0be1abf10e36cb98431e49

  • SHA1

    0c1d451052c5983b6aac4b914d477a60e1aeb40d

  • SHA256

    43748f04408bc0de6e66d03bf9eb4278d9b5809c46989364a8f05f4611074eb2

  • SHA512

    f365a128c296ff489095cb1c8592f7e7fc7560f9e1273609ecda08e5d691e7e9a83b585023a3a10b768dfaddd8e8011fcd5ed43827fe0fc2940ea2b97a6634e6

  • SSDEEP

    12288:hJV0DNCa/YmcS3dgTVy3rj8oWKu5CD4E2ULwIC0zfqhig4fFB6BdUP41Xsg/5GJ8:hqNpdIuVqhurrqNpdIuVqhur

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 30b859ef6c0be1abf10e36cb98431e49
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections