General

  • Target

    0089b2568ccdb7b801df0c5cbbd19dc7.bin

  • Size

    119KB

  • MD5

    2b92587520e34c247d4537a8997e059d

  • SHA1

    3d4e571ec6bea92fea24fec236bac5f215f56a20

  • SHA256

    0c04dbf61a712ae7891d5596514e3e0b683b9ba67792a2e24338666d4a816b5c

  • SHA512

    60b932c614a109c5143837b146d24f0fe7bd500b198a1675cb9ed69b66f6dbd48023958a2e35ddce1c0efe318d5b3acbbaf7627cd1712c5361134aba82ca31ce

  • SSDEEP

    3072:NiWEyCszIvllt0Icsw9FfRIMceZf/qGa70y5voyqh7Ldd8K5HNucf0/NvOjJN92:AWE9btV+fRvNqGa7xvoZddHHNtQNvy+

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0089b2568ccdb7b801df0c5cbbd19dc7.bin
    .zip

    Password: infected

  • 73a5606dd57ca2eaacacda3e2386f50c81390d3be4a5277ef8375be3ab7d4a1d.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected


    Headers

    Sections