Overview

overview

10

Static

static

10

反p2p终�...��.url

windows7-x64

1

反p2p终�...��.url

windows10-2004-x64

1

反p2p终�..._0.exe

windows7-x64

1

反p2p终�..._0.exe

windows10-2004-x64

7

反p2p终�...��.exe

windows7-x64

8

反p2p终�...��.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    53b2739b338d74dbcd47af5ae965fb46

  • Size

    928KB

  • MD5

    53b2739b338d74dbcd47af5ae965fb46

  • SHA1

    d09479f38fca525d356466599228cf0662616493

  • SHA256

    d18b1b9472e9adad52cdf260422fa4886307f41a4d20ed691f4c11bc375c9022

  • SHA512

    113afefef24dec012b1db26cb23901f4c1f9e4fa78ab7fd995f6df5535f1030501e32019960298fb64866f3f68890b78dd5ae47f11b608131ff3e5e6f58a9f32

  • SSDEEP

    24576:44GDpvBZSbtx+6dEUSmpUmITPKKldb3HE0Z:444dWbrBEZmpUBKKldb3FZ

Score
10/10
upxblackmoon

Malware Config

Signatures

  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 53b2739b338d74dbcd47af5ae965fb46
    .rar
  • 反p2p终结者2012 增强绿色版/PC6官方下载.url
  • 反p2p终结者2012 增强绿色版/WinPcap_3_0.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • 反p2p终结者2012 增强绿色版/使用说明.txt
  • 反p2p终结者2012 增强绿色版/反p2p终结者2012增强版.exe
    .exe windows:4 windows x86 arch:x86

    1c63e1e6cef55f7ecb2c22a683b1e152


    Headers

    Imports

    Sections