blackmoon | 1cea9c48d47a5e5649fa2e54ca39c6723a72920662aa59fde0c11f4b44cdf616[.]exe

General

Target

1cea9c48d47a5e5649fa2e54ca39c6723a72920662aa59fde0c11f4b44cdf616.exe
Size

437KB
MD5

db852ee87b3995619a2420a5d2a0d1f1
SHA1

56455dc2d810730f8014c7840be6e58e36a7720b
SHA256

1cea9c48d47a5e5649fa2e54ca39c6723a72920662aa59fde0c11f4b44cdf616
SHA512

eafdd3932314d0b718b615b1624f5ed513bce6f306b0e657899b44916d2cf4d324838c14308b086a0587d66ca721b9430188b73f09b498d978c7f1f42eab7d64
SSDEEP

6144:5fweR7gpANB0sv2YYuwfDoOPV1x0GwYpk09RhyQ3Zmt:J1R7gpAwsuvDNP/xyqk09TyCct

Score

10^/10

upx blackmoon

Detect Blackmoon payload 1 IoCs

resource	yara_rule
sample	family_blackmoon

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1cea9c48d47a5e5649fa2e54ca39c6723a72920662aa59fde0c11f4b44cdf616.exe