General

  • Target

    da0bb5f11227cab027e66a6dc2abfbe01f9bbcbc3f3908e2ad2f49b20fa525a9.exe

  • Size

    518KB

  • MD5

    184a2b6302dbf4c535de9028e8b1a0df

  • SHA1

    d58d5df05240e5c5a1d1e125b12ad9ac3a587f57

  • SHA256

    da0bb5f11227cab027e66a6dc2abfbe01f9bbcbc3f3908e2ad2f49b20fa525a9

  • SHA512

    25b2df7f1f2662a2195559e61fa5450ef8393d111ffdaa40140295eae0c8dacf3d185dc9a87d1b64acfd1671d421385c8d004a14bcde3e22e6dd520bb1c6d33e

  • SSDEEP

    6144:0wGdR+Yk/N8duBmG6t+UnRsRCQ/OJBr7CCnv:0woR+Y4NSG6oUnRsdOJBr7CMv

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • da0bb5f11227cab027e66a6dc2abfbe01f9bbcbc3f3908e2ad2f49b20fa525a9.exe
    .exe windows:4 windows x86 arch:x86

    da4a387004bf1285d93edaa4d5233098


    Headers

    Imports

    Sections