General

  • Target

    d5239ba56ef2f39b1da523e804f33625.bin

  • Size

    125KB

  • MD5

    6fee12d758108af953b26defbf2b9efb

  • SHA1

    7dcaf8edc3018e0ba595b0dd33bdaf588a7e6586

  • SHA256

    d3a8f30a8ca6996b02163d1badd044b9d357f81864d012203203d65daa6f87c3

  • SHA512

    0c65dc36643766ffec47c2cf240e8d217e17158b4465bd73ec08a1ed16da9cef5a04d0ee163e60b026a0e0a9acc3ee54ba1f3ed330c94e6f8b4f46422b7d7bdc

  • SSDEEP

    3072:KGvRxIyhnhrQX0CK3M4/Y8x4KaxopPdjMs6/OQ0JD:KgfIQU0ZZzxWOpVAs6H0V

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d5239ba56ef2f39b1da523e804f33625.bin
    .zip

    Password: infected

  • 9df901aa003bd47016ef7976233bcfbc63a7f74a21537a38498110cdf1955341.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected


    Headers

    Sections