General

  • Target

    51b56a5e6f2c4db0be784b2b37aaf1f3

  • Size

    5.7MB

  • MD5

    51b56a5e6f2c4db0be784b2b37aaf1f3

  • SHA1

    8eec52ccd19d28798ee3595039765b5e191cd2f0

  • SHA256

    db9c2d3e7cd3775c58404d8a871e04d56184a943dd5df7d5ecc4408ef744e320

  • SHA512

    bf16369bada3873e8cf65c56c8773ead1544c18db73c81588e70a15fe6bc8b1e83aed334e2dde4db8271b939ec0dbf4c9ef2a33eed681d0699a471832021fd43

  • SSDEEP

    98304:adE1OdE1udE1OdE1MdE1OdE1udE1OdE1edE1OdE1udE1OdE1MdE1OdE1udE1OdE1:OWaW6WaWAWaW6WaWqWaW6WaWAWaW6WaW

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 51b56a5e6f2c4db0be784b2b37aaf1f3
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections