General

  • Target

    0c082014d003b257b490a56057bdb94b58be290da213befe8aae1d3aab6f10de.exe

  • Size

    458KB

  • MD5

    5b1f4fefe31c2caa1966ca56d71c282e

  • SHA1

    2c3606619bee88a144e075e9486fb812ecba1a79

  • SHA256

    0c082014d003b257b490a56057bdb94b58be290da213befe8aae1d3aab6f10de

  • SHA512

    930f70ad390e43c7256c9782848b5cff49694435aad689ca22fb83c615a119ae03ab83bb10f3543cd8ba9f1b5824d98483f5fedf2097a0ab9f29fb34c921190e

  • SSDEEP

    6144:uvbuWQu/cuaS2l8iE0B55FrJJJekPd4/2OAgerHO:uvqWQub2lrE0B55FpekPd4/2rpO

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0c082014d003b257b490a56057bdb94b58be290da213befe8aae1d3aab6f10de.exe
    .exe windows:4 windows x86 arch:x86

    391b34fdb03bbbe961a380d74dcff2da


    Headers

    Imports

    Sections