General

  • Target

    49665d2d41515f66b3b8043d4218c94d.bin

  • Size

    122KB

  • MD5

    31b232b980974716fdea8394d3579dd5

  • SHA1

    9b7cb12dcb3917722e1454fe0df6c3a45da85c40

  • SHA256

    0630298e145250020320634a554f7f5b0de01f17b62417a214d10afef1b130b9

  • SHA512

    4ef07382bb100281dbc1f4256f8c8a10c4463fb5bbc93277d18adeb4cda93465fc242fdf814d21095d01a40ebd866de95d631393d90d8f8fdd2ac2c4fef0219c

  • SSDEEP

    3072:IsLzjseTcsG31LqjJfHXKVK2gVHyNVR+nz3lCvDag6X8w:IsseAj31mjJfa42b/R+nR8DV6h

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 49665d2d41515f66b3b8043d4218c94d.bin
    .zip

    Password: infected

  • b818ebec50e611aa06e1aef9a4ebb799559cad64254a9b69cfc3d631def30bd3.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    391b34fdb03bbbe961a380d74dcff2da


    Headers

    Imports

    Sections