General

  • Target

    8096ab2207664b4699e48a7c1933d09456980fca88993bcde3356b0930dff9c6.exe

  • Size

    508KB

  • MD5

    d0a395e1540e4d157c223117442ee476

  • SHA1

    bd64ca3f41fc9802ebece9efd9d08e86742204ea

  • SHA256

    8096ab2207664b4699e48a7c1933d09456980fca88993bcde3356b0930dff9c6

  • SHA512

    5d2590893b6acdfa6fd7d33f719ffb55f3fffeb77ed4c32eae47008d25c0f4eada3a2dad05b2c7d44e22955591f6dc8057dc99fa4418427489ab120ce03d5a2f

  • SSDEEP

    6144:PozXQKqfmiiyWwuiFOLeyOV0R7YRXxR6AC:PgXQKSLpOCtV0R8xR6AC

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8096ab2207664b4699e48a7c1933d09456980fca88993bcde3356b0930dff9c6.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections