General

  • Target

    2x.rar

  • Size

    49.6MB

  • MD5

    bb42bea7be4ca73cdc687a84788d7040

  • SHA1

    58f2ac9ed2d1499bdd918177f388020404041deb

  • SHA256

    d8efe67e8c382bb14014787b67fa377a8444f68ae28ef1b2c88159e8a1a12670

  • SHA512

    4656430860aca2367b5d2845dfb2711cc3e8333fbc3d29efa0fee5bc5fa6286cf497ef18d41d10a28c3dc22ce32d095a1b7fe35c35cb569a13c11e31499a1aeb

  • SSDEEP

    1572864:RSWIf5zj/YIFEjPn8h08DSWIf5zj/YIFEjPn8h0Sk:RJIRzLxEjPn8h0gJIRzLxEjPn8h0/

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 2 IoCs
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2x.rar
    .rar
  • BrowserProtect/BrowserProtect.exe
    .exe windows:5 windows x86 arch:x86

    035fde2727242d3c07134c8bb74daf58


    Code Sign

    Headers

    Imports

    Sections

  • BrowserProtect/datastate.dll
    .dll windows:4 windows x86 arch:x86

    ca49b2e8b6dffb16ae093c8874a8d74a


    Headers

    Imports

    Exports

    Sections

  • BrowserProtect/madbasic_.bpl
    .dll windows:5 windows x86 arch:x86

    ae5a6a29d3cea5a63ad958cfb1a5fb0c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • BrowserProtect/maddisAsm_.bpl
    .dll windows:5 windows x86 arch:x86

    22531f752b354d949452fbdf15d6da72


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • BrowserProtect/madexcept_.bpl
    .dll windows:5 windows x86 arch:x86

    2a873ab64f922b5d3d6841d9d0c267c9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • BrowserProtect/rtl120.bpl
    .dll windows:5 windows x86 arch:x86

    fac06cfe16c2052ff34e27439885ff00


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • BrowserProtect/vcl120.bpl
    .dll windows:5 windows x86 arch:x86

    e8b35382b98f61463da4a5d7a3b50753


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • BrowserProtect3/BrowserProtect.exe
    .exe windows:5 windows x86 arch:x86

    035fde2727242d3c07134c8bb74daf58


    Code Sign

    Headers

    Imports

    Sections

  • BrowserProtect3/datastate.dll
    .dll windows:4 windows x86 arch:x86

    ca49b2e8b6dffb16ae093c8874a8d74a


    Headers

    Imports

    Exports

    Sections

  • BrowserProtect3/madbasic_.bpl
    .dll windows:5 windows x86 arch:x86

    ae5a6a29d3cea5a63ad958cfb1a5fb0c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • BrowserProtect3/maddisAsm_.bpl
    .dll windows:5 windows x86 arch:x86

    22531f752b354d949452fbdf15d6da72


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • BrowserProtect3/madexcept_.bpl
    .dll windows:5 windows x86 arch:x86

    2a873ab64f922b5d3d6841d9d0c267c9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • BrowserProtect3/rtl120.bpl
    .dll windows:5 windows x86 arch:x86

    fac06cfe16c2052ff34e27439885ff00


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • BrowserProtect3/vcl120.bpl
    .dll windows:5 windows x86 arch:x86

    e8b35382b98f61463da4a5d7a3b50753


    Code Sign

    Headers

    Imports

    Exports

    Sections