General

  • Target

    c8dbc5edb975be168eccfa148c702a2e.bin

  • Size

    95KB

  • MD5

    96f0939fc44f3973eaaff2207e92d703

  • SHA1

    8443f957bd9efe759138bfa4e3e672927157ee2e

  • SHA256

    aa514f754f98de1813799b2e77bd0f868a2aa967e2e776f1c6e672c156581445

  • SHA512

    d5f41f6f559a578587765307c4d7218ea921440083463774391766503624540da2777a2e87695e8ead40ad269cd9ea5196d80a797eda9183bb2d71f7965c3f2d

  • SSDEEP

    1536:nuPbimG+R40I30pkQOvNea38m4tU8HbYzKdyesB2MUzKY37Lsi6pfGF8J2gqp:QG+mGkQsZotU8Hb8C8IrNHMJ2l

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c8dbc5edb975be168eccfa148c702a2e.bin
    .zip

    Password: infected

  • a8bcfd5e5b43db8214a9ea482b172479415e6a32dc7861087e3dfb15b1e73ef9.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    80b69be2bc873884492028ff7ce272ad


    Headers

    Imports

    Sections