General

  • Target

    11fbf0e65b4a3c5970c16fe79f2e442fdb484613703c5453215e1ca835837988.exe

  • Size

    4.5MB

  • MD5

    35f88b4ddcfa1ad111af4c95807a64b5

  • SHA1

    b524a0b67990fadc2f952592d2fe969e46f4f800

  • SHA256

    11fbf0e65b4a3c5970c16fe79f2e442fdb484613703c5453215e1ca835837988

  • SHA512

    57352f99225b90c0072862905fec3e239d65ca9da5ceaf99d3de33dd75cc8366cf3e7c073db4f226b5a7871ce03b8da4a86ccc0572cbd4f882e76a3213f7aed6

  • SSDEEP

    49152:BLLM4pYVSRTzW3x71kjLtbRz53wJWqD2NRmXNT08+C3looYM2sdIYOxrPFS:Rg4pfTzWhJglZEWNkloq91O

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Detects Windows executables referencing non-Windows User-Agents 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 11fbf0e65b4a3c5970c16fe79f2e442fdb484613703c5453215e1ca835837988.exe
    .exe windows:4 windows x86 arch:x86

    0699e3870e208d7c8b967949b3d04eeb


    Headers

    Imports

    Sections