General

  • Target

    5d5d24574f56e090d0bc8a753fdb8e56c2e0232d368d696459e0333b4e34626c

  • Size

    145KB

  • MD5

    16c2b2255bf7e1a687b6ddc4f99fca81

  • SHA1

    a78332c7802b8eeb59439e4d1de3f9eba955c355

  • SHA256

    5d5d24574f56e090d0bc8a753fdb8e56c2e0232d368d696459e0333b4e34626c

  • SHA512

    6cdb43b9c37d9f654de8ec0c5608c6c6ac7436c1d6950a72c898bdaca163ab362b845fcc776107a787918690ca1959b3a13cceaa1eea4e0e5de019225013b57d

  • SSDEEP

    3072:WWWX0E6LJjGF+dtoj84/9rOnt/cA6QIjeyuuI+4:WmJ4+Tj4/QSA6QI07

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5d5d24574f56e090d0bc8a753fdb8e56c2e0232d368d696459e0333b4e34626c
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections