Overview

overview

10

Static

static

10

d8d447ad44...23.exe

windows7-x64

10

d8d447ad44...23.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    cc8f938541333e0fed0acd7fe6483d1a.bin

  • Size

    115KB

  • MD5

    f68cdab85eb6f92c25a98fda53c6ded1

  • SHA1

    7e51fcd5ae493fb14a97f6f8af946cf4a0e3c725

  • SHA256

    e49da524a5ac05ba2288f4f3376e499353202f54e0cf216ef9f0349969545dea

  • SHA512

    bc785489bb4a87dcfeda7e0ed016f07cc0043c22d0699d2e8980ec5cb1191293c57677617f1204a57007edc81e50d1d2064a0edbac0cdf3d01ad9c5da3d82561

  • SSDEEP

    3072:3d/fVIf6nBntsDoMEFZ8rLRgPZXWTGT6Kc3:3dif6nn6oMEFZa9gUTl3

Score
10/10
upxblackmoon

Malware Config

Signatures

  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cc8f938541333e0fed0acd7fe6483d1a.bin
    .zip

    Password: infected

  • d8d447ad44f1544f279f7732275d3310e84720a3540dd515d46f8b3b7460ce23.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected


    Headers

    Sections