General

  • Target

    48bef47bdbb6c2f0945954cbba24c9458d825675f605da37b5410d0e02724fb2

  • Size

    5.1MB

  • MD5

    5b1eec06948723a0a9142f493e6de785

  • SHA1

    45c63d6d6d2402cd4b8f129898408a76a7a1b4a6

  • SHA256

    48bef47bdbb6c2f0945954cbba24c9458d825675f605da37b5410d0e02724fb2

  • SHA512

    35241db5fd89aded382f0404c96848bd9c24b3f1404917b518825c2b50d7c0461dd37b99e507062faffb58ee4cbfe5b0283420c5ede1d95a655b8d53ed560e17

  • SSDEEP

    98304:HjWNpUpaJk/4gauWniPVq/TltAxhk+0o78eVmmg3bqeyc3Fi+1hVoGvVeuWN/Aae:HjWNSpaG4g3WidqAg+BIQmmibFVFi+NF

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 48bef47bdbb6c2f0945954cbba24c9458d825675f605da37b5410d0e02724fb2
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections