blackmoon | aa7dd8de027bf593b6d5ef48755c9592e8c588dc62a75dd3c8369080aa91cafd[.]exe

General

Target

aa7dd8de027bf593b6d5ef48755c9592e8c588dc62a75dd3c8369080aa91cafd.exe
Size

504KB
MD5

d046a42c03cd76fe7ea9552e23a6592e
SHA1

ce90e5e2b5a47b6ea4dae38c248e659498317f1f
SHA256

aa7dd8de027bf593b6d5ef48755c9592e8c588dc62a75dd3c8369080aa91cafd
SHA512

c1bf731b8e5e6f0204366fe79d6b8f99ef49e05fd77e934c01f790cec81ba50120e0fc248d84c85be5b437adf40bbd5f53bbc1bd2d0aa5b66aa45198c78a3b43
SSDEEP

6144:6cHpJfHElepVuWwP5YcQfg8J+oj4NJ+S:6ifk0GPacQfxjQJ+S

Score

10^/10

upx blackmoon

Detect Blackmoon payload 1 IoCs

resource	yara_rule
sample	family_blackmoon

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa7dd8de027bf593b6d5ef48755c9592e8c588dc62a75dd3c8369080aa91cafd.exe