General

  • Target

    1d042b5bece7a3e97ffc050c9e18089e768839d43b16cb4aa036e9d8d4451ed7

  • Size

    140KB

  • MD5

    3a97cc28c661e033e4318deb2eb0f463

  • SHA1

    26639dc716336f8e1618bafd883a9912947c25b4

  • SHA256

    1d042b5bece7a3e97ffc050c9e18089e768839d43b16cb4aa036e9d8d4451ed7

  • SHA512

    a570be1f119f3d01c57fb92cb9e146f79b17bde9e56fa932601e669d512b9f2629c6219eb769cef88b3d9b3b741d89348197b36a28dedb3e1db15f4296276508

  • SSDEEP

    3072:CNEQnMEUU3oaPWgTthqg20VuLCluaCP/s588hOMwzsgavXaqrNv91y:gMYoaxTTUCeuOl6f7x9o

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1d042b5bece7a3e97ffc050c9e18089e768839d43b16cb4aa036e9d8d4451ed7
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections