Overview

overview

10

Static

static

10

da0bb5f112...a9.exe

windows7-x64

1

da0bb5f112...a9.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    184a2b6302dbf4c535de9028e8b1a0df.bin

  • Size

    138KB

  • MD5

    31f4184bfda63dd07dc72fbc93140f66

  • SHA1

    a279ca9a302675768226b12de2c5e4dfe0467b0e

  • SHA256

    43b21d16f3ee3acbd7b4cbeaeea75b66b3b6fa2d229cd943b1a74b1170cd86fe

  • SHA512

    f64aa0bb155222abe8e9a7dd3aaca812d43ff0d6a315d77d4875780bdb1b1d2eeeaabe0ecb9d0b3810a60cb85183f1cd89efa23d65716c86d2430ace86d1488b

  • SSDEEP

    3072:M1ngMBOPobzOIkLc8xHRyuSoeEfn4IaNDHQ8NegOMY4mMVk6c6VSwEUcQ:+g3PobzOIkL7QuSBEv4nw82MY4fk6jSI

Score
10/10
upxblackmoon

Malware Config

Signatures

  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 184a2b6302dbf4c535de9028e8b1a0df.bin
    .zip

    Password: infected

  • da0bb5f11227cab027e66a6dc2abfbe01f9bbcbc3f3908e2ad2f49b20fa525a9.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    da4a387004bf1285d93edaa4d5233098


    Headers

    Imports

    Sections