Overview

overview

10

Static

static

10

acaff25c11...6d.exe

windows7-x64

10

acaff25c11...6d.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    271091e0cb49c43702eea7d6bd4f1959.bin

  • Size

    469KB

  • MD5

    007ff287388da2ab8eced7e3ef068667

  • SHA1

    1f47b3e1ef0e167ea029401c23f88140f456e31d

  • SHA256

    f52e982eba2c95780bca1a674b459fd7b96cc6328e1d3ffbce224b0120feba4b

  • SHA512

    51effad9c6e7bbb6f5c5a04ec544340975bdb7b2703919d04fdddacff0a8b1c2bb13131842b0472aec99fedc0fcb1268030f2343ca54393f56990befcaf23569

  • SSDEEP

    12288:z/13leB+DHtYG4/jimgl44sy8bd1wNtk7x0JeNbuksp3:zvYkWLjid4ZSNDk43

Score
10/10
upxblackmoon

Malware Config

Signatures

  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 2 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 271091e0cb49c43702eea7d6bd4f1959.bin
    .zip

    Password: infected

  • acaff25c119866e51849c5acc37e3fdf47a86b96f6ef2b7c53f5445bc7c55f6d.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections