blackmoon | 559cd7c08e22ad0b0cc72602acf3dcd4485f579d5862efd5574c876c72f99216[.]exe

General

Target

559cd7c08e22ad0b0cc72602acf3dcd4485f579d5862efd5574c876c72f99216.exe
Size

438KB
MD5

84fde430036f68dc3336eccda01f91a4
SHA1

a98cd9fc7df683499d6618b9bd708bef0092184a
SHA256

559cd7c08e22ad0b0cc72602acf3dcd4485f579d5862efd5574c876c72f99216
SHA512

e49c85390df0f9d5c7690ad7e0d75a3981e88dae4ad4680238d5522d2b5ab565763e7b48157046784fd13638f14f296555d0f2c977cd65d50e8771a683d4f4eb
SSDEEP

6144:Wvk3Q5ibjnNuuXckaL7pbRBkce97awo7L7oVT4q:WvMQ5ibjnwka3pbRC19Gwo7oVT4q

Score

10^/10

upx blackmoon

Detect Blackmoon payload 1 IoCs

resource	yara_rule
sample	family_blackmoon

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
559cd7c08e22ad0b0cc72602acf3dcd4485f579d5862efd5574c876c72f99216.exe