General

  • Target

    78f70c15a9899517feb5af49363ad78e17c89c162ef56e808c09fb2021ad0c72.exe

  • Size

    508KB

  • MD5

    218b978b098a2c935dd831982e35a89b

  • SHA1

    f4d155f03239d35ca4a3606926704fbb3ed2c952

  • SHA256

    78f70c15a9899517feb5af49363ad78e17c89c162ef56e808c09fb2021ad0c72

  • SHA512

    5d6a2d05921152071600c0418ec46960270de4634c6cdf6cfd498871586f438ed15039a03fa808154e5d45a9983f1e1b6625cea2de0dbec4a5043722a63b759c

  • SSDEEP

    6144:qwGdR+Yk/N8duBmG6t+UnRsRCQ/OJ//Yr7VC:qwoR+Y4NSG6oUnRsdOJ/Ar7V

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 78f70c15a9899517feb5af49363ad78e17c89c162ef56e808c09fb2021ad0c72.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections