General

  • Target

    d5a591b4fc5a2eb479a72b466719bc20

  • Size

    87KB

  • MD5

    d5a591b4fc5a2eb479a72b466719bc20

  • SHA1

    ba0bd8a5e7c9692a4bb850630c3da1e99182360d

  • SHA256

    801a2be44be811e6b51016bbb374a13db8f57ee0adc1121d8645518cb953d4e8

  • SHA512

    57ac76c31372aa14c63678724f2fc3d0783511e55c4929739513be79428283ed46ccb53a3a4c2202a3751db1340c684c0228dca7d3049c76e996f9360920e928

  • SSDEEP

    1536:GtyyRF/OxmfzDcazhe2hb5nnW+ME9Sf2+pg9R8LxM8WkNK+tEf6uacH:7yTtfbo2nWW982+paS9pWkNxXu7

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d5a591b4fc5a2eb479a72b466719bc20
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections