General

  • Target

    5c262fbe0825166c62125530388466a6

  • Size

    87KB

  • MD5

    5c262fbe0825166c62125530388466a6

  • SHA1

    13ab0294505e8b2b78d00b1fdaa762fc390a09ec

  • SHA256

    c984ccd4531ea5d7afa92143a458c7864cb4fb146e37e1425feced5d826066a8

  • SHA512

    db043033be8e7a91e35d02400a52f835a46fae24c7a018d150a7585d98916e012e001ccae43ae9671a1e453540ab43a01bb48ea19dcb4915c6d2b5f340d8c3b3

  • SSDEEP

    1536:GtyyRF/OxmfzDcazhe2hb5nnW+ME9Sf2+pg9R8LxM8WkNK+tEf6uach:7yTtfbo2nWW982+paS9pWkNxXul

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5c262fbe0825166c62125530388466a6
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections