General

  • Target

    e06459d0bf2caac0643bfbe9939868e7416344db05494540e537f93c45b7e0d2

  • Size

    88KB

  • MD5

    5d19f232496cca169461fc9ec2f91741

  • SHA1

    91089b89633dc0391ecf0a058cc6eaadd9f70e05

  • SHA256

    e06459d0bf2caac0643bfbe9939868e7416344db05494540e537f93c45b7e0d2

  • SHA512

    8498d9126e1a2f3d6de9af7b6ce247ec4ea75bd6cc2c77d296f9dd1bfd361f3d294628c39a8337e4523dbbff2844d2374c7e34f04ede724d0ff93c1c49372f57

  • SSDEEP

    1536:5+4hkM3Yz8wMZhUD2XsjEQWOSkE+Ct6WKBex3GWU5FkWp+AmQwKGSZhCQbIo/tSs:dq6OLM3QasY5Ft71fqWWp+efG4hCQrr

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • e06459d0bf2caac0643bfbe9939868e7416344db05494540e537f93c45b7e0d2
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections