General

  • Target

    56ae462686e650de07d2840ba5411e752f17d74280e6e53f34cbcbe76273b557

  • Size

    116KB

  • MD5

    692eba281a107b61fe4483c393659113

  • SHA1

    97f7eadba1ba0015d7bb360f13784afec9797c2e

  • SHA256

    56ae462686e650de07d2840ba5411e752f17d74280e6e53f34cbcbe76273b557

  • SHA512

    0114d275c9789119f352d88c4b22a686ce535cbabe1f4b1366bf67f077027f645c076a58082833bd3e215faa453896738ea1a66347364cb21c28caef2008d490

  • SSDEEP

    3072:LO00XuDJFufFM6SPRgdrhWoXA+Di1XXYa:LqfFM7RgCopm1H

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 56ae462686e650de07d2840ba5411e752f17d74280e6e53f34cbcbe76273b557
    .zip

    Password: infected

  • 6be06a06050ced63aa3759e19121cd8b25614ea5d16fb536d159c30657feb639.exe
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections