General

  • Target

    4d1bc998af39c6b8eb78a14a80b391a2

  • Size

    2.7MB

  • MD5

    4d1bc998af39c6b8eb78a14a80b391a2

  • SHA1

    2fac4720cee8e86f134d56f2d0dfe6528019be2e

  • SHA256

    6c42e71dead1f015953532b67acc1de15b9507c7238feddb0e225acbc00bb5ec

  • SHA512

    9f222fb21f979c562bad0da15e01c279f3579d26f2cd1803ce3913686221f4e9cbea273ed49605b2def14f7329e20225ebfac9597ed4bc9c8481a1341f4c2567

  • SSDEEP

    49152:pEdE11EdE19EdE11EdE19EdE11EdE19EdE11EdE1:adE1OdE12dE1OdE12dE1OdE12dE1OdE1

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4d1bc998af39c6b8eb78a14a80b391a2
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections