General

  • Target

    bc2eea5ac684355f091c248492c3d119.bin

  • Size

    122KB

  • MD5

    b9cd1a83c683204d3b1ec870377e7203

  • SHA1

    4171221fd17917477289f11ab46ee08e8aa23640

  • SHA256

    294a01c79178f6e8fb5560d41491638150945b5d33e540aeff256113db52ec4b

  • SHA512

    e0bc3be72ce38a78129387d10c4d6bf2c4f4c4074c1d46e7ca83777a727bd10b51e04ab97efbb008c807125bb7373dff101b3ed36ff69035c06ab97d29294c1d

  • SSDEEP

    3072:w7vUjvMFYfzmHiycyAMuFq6UqEyAqS6f508yEpRuRIu9:O1GmHiygMMq6UEAaKv89u9

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bc2eea5ac684355f091c248492c3d119.bin
    .zip

    Password: infected

  • 768ef14ef73e93012d852ecbef0b107ac82dae975cc6c22c1a8d805aaaa6e49e.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    391b34fdb03bbbe961a380d74dcff2da


    Headers

    Imports

    Sections