General
-
Target
connect.exe
-
Size
302KB
-
MD5
e563d21a6cf6c8f47c016ccc82cc776d
-
SHA1
eeb8b9a5b0b09046cc8c30ef41b348627ea693bc
-
SHA256
3b195988c3097b2871304af86bd4db241310a7b4cf39281ac8b2bccad53f5a84
-
SHA512
3bcdfdd9dbd233e0b524c17c0ad50c9e8cd1662a590eb4b56d98d94b61098e99a04f186ec1231d536f85c2735e1864e810d500094eb63caf00c62595ff04f062
-
SSDEEP
6144:mNiYSLxH1/FRcmBJooqSs2l1gWXbOhAmsCeQE1kmBf6NeEmvQU2Kc:mqlFRcmhql2EYOhAxQ1mBqmYJKc
Score
10/10
Malware Config
Signatures
-
Blackmoon family
-
Detect Blackmoon payload 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
connect.exe
Headers
Sections
-
out.upx
Headers
Sections