blackmoon | 27a8f7e5dc0ad2c55d13f9d327723c4c9bfb7bd6ccc9f9b3d9211b7b8cc3dc98[.]exe

General

Target

27a8f7e5dc0ad2c55d13f9d327723c4c9bfb7bd6ccc9f9b3d9211b7b8cc3dc98.exe
Size

421KB
MD5

9885c64277d9fbb907a0bc243d7dbfa5
SHA1

35e40b71d509acceb3f6a74dd945ff86b714a15e
SHA256

27a8f7e5dc0ad2c55d13f9d327723c4c9bfb7bd6ccc9f9b3d9211b7b8cc3dc98
SHA512

b624fb746707367bd9f38e98c16b0520a6c5777d10d11ac0a678936f7bad79b778dff28ea25e454e1a0a4c23df46803510e4ea7c755c9ee7fd27d59c7ef6a9bc
SSDEEP

6144:K5/YZ58drqrhGcbLhmvjSN6jZhixVK/B/zIydenCV:K5/Q58drihGiLhmGNiZsx0B/zIkenCV

Score

10^/10

upx blackmoon

Detect Blackmoon payload 1 IoCs

resource	yara_rule
sample	family_blackmoon

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27a8f7e5dc0ad2c55d13f9d327723c4c9bfb7bd6ccc9f9b3d9211b7b8cc3dc98.exe