Behavioral task
behavioral1
Sample
6be06a06050ced63aa3759e19121cd8b25614ea5d16fb536d159c30657feb639.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
6be06a06050ced63aa3759e19121cd8b25614ea5d16fb536d159c30657feb639.exe
Resource
win10v2004-20240226-en
General
-
Target
56ae462686e650de07d2840ba5411e752f17d74280e6e53f34cbcbe76273b557
-
Size
116KB
-
MD5
692eba281a107b61fe4483c393659113
-
SHA1
97f7eadba1ba0015d7bb360f13784afec9797c2e
-
SHA256
56ae462686e650de07d2840ba5411e752f17d74280e6e53f34cbcbe76273b557
-
SHA512
0114d275c9789119f352d88c4b22a686ce535cbabe1f4b1366bf67f077027f645c076a58082833bd3e215faa453896738ea1a66347364cb21c28caef2008d490
-
SSDEEP
3072:LO00XuDJFufFM6SPRgdrhWoXA+Di1XXYa:LqfFM7RgCopm1H
Malware Config
Signatures
-
Blackmoon family
-
Detect Blackmoon payload 1 IoCs
resource yara_rule static1/unpack001/6be06a06050ced63aa3759e19121cd8b25614ea5d16fb536d159c30657feb639.exe family_blackmoon -
resource yara_rule static1/unpack001/6be06a06050ced63aa3759e19121cd8b25614ea5d16fb536d159c30657feb639.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/6be06a06050ced63aa3759e19121cd8b25614ea5d16fb536d159c30657feb639.exe
Files
-
56ae462686e650de07d2840ba5411e752f17d74280e6e53f34cbcbe76273b557.zip
Password: infected
-
6be06a06050ced63aa3759e19121cd8b25614ea5d16fb536d159c30657feb639.exe.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 420KB - Virtual size: 4KB
Size: 438KB - Virtual size: 4B
���� Size: - Virtual size: