Overview

overview

10

Static

static

10

ec8768a3ff...aa.exe

windows7-x64

10

ec8768a3ff...aa.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ec8768a3ffaf1ffe8e0a4d0d35011baa

  • Size

    12KB

  • MD5

    ec8768a3ffaf1ffe8e0a4d0d35011baa

  • SHA1

    ab6bdc2166b93dc3ee7bf1e0056a02dbc4d85627

  • SHA256

    5f8e8a755bdf79ed73c6e33698b84d45a531b2ba293c214ffa224c2cfbade4b3

  • SHA512

    9d540a2111c9929de399cad2ae42653d0c8f287cbcdd11d4d6300eb4c0cdc454ffd6c4c292cfc3cde2232411a8f4fd1f017991281c7cf8bffec0ddd1926b22f3

  • SSDEEP

    192:UPtBEqroe0z3TNOKDtE0tk/k0FegI1O3P0EemvONwEN7kYIunZDwj0+2:LUoRzBOMtEXk0QgR3dl2wUc0yji

Score
10/10
upxblackmoon

Malware Config

Signatures

  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ec8768a3ffaf1ffe8e0a4d0d35011baa
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections