General

  • Target

    aabeb79ce89aea8eb3edf4d73a590365eae74c81b3fefb6928bda7f53022419a

  • Size

    826KB

  • MD5

    c91e5f6762702921c3eac4bc48b8dcb0

  • SHA1

    9819635ee335cb4f291946167b9a58d33541036b

  • SHA256

    aabeb79ce89aea8eb3edf4d73a590365eae74c81b3fefb6928bda7f53022419a

  • SHA512

    28ed3970602e17ff48bf23dbd7fabfe567175ef66ec458166f27df2491ab5a3a867387837dcb3c1a19175aca4d1a6e06894d13322beda62d88ff7b54e382d352

  • SSDEEP

    12288:363wP8U1/M+r5Rdp2JX/xASW6r2mCEl8nF6z5Ky1VkPXHQdGxV/db0uwG0x8CJ59:35idX/ximAFs5Ky1VkPXHPh0Lg3ZQ

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • aabeb79ce89aea8eb3edf4d73a590365eae74c81b3fefb6928bda7f53022419a
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections