General

  • Target

    3afc48d5b92da1948f3f112c4e896e476fe8858090c7001b955c2b459c742486.exe

  • Size

    447KB

  • MD5

    9dd5731762febf26965ea7e5356ac932

  • SHA1

    24328448a6ae4d25f4056a383d3c47e1429a9818

  • SHA256

    3afc48d5b92da1948f3f112c4e896e476fe8858090c7001b955c2b459c742486

  • SHA512

    93db702e93827bb32cd9726f8682b67e83f32a6f041bf4b29bbf839bda59ad33375c7a4f91e99f184bdb0cc3c720f9e3f618e01127ef72bd8900e17b1c05acb9

  • SSDEEP

    6144:sZrK+r+l0eNPBJrOxQD90saoTXWIg7mljhubc:sZ++qlRBBOxQDU2XWIg6Bic

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3afc48d5b92da1948f3f112c4e896e476fe8858090c7001b955c2b459c742486.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections