General

  • Target

    0752d84e835a2125c3c0ee284404b4e9c401156c36a37ac7f0d9abc1250eb779

  • Size

    121KB

  • MD5

    895ed5f5c93f626ae44ff9e2e37a00a8

  • SHA1

    05ed7536430eda4f260b19574192c1643b6a555a

  • SHA256

    0752d84e835a2125c3c0ee284404b4e9c401156c36a37ac7f0d9abc1250eb779

  • SHA512

    63649ca90820035f34be02f9e422d63240f6ef142a9170bafdbe8c7d49ec00b60ac213b633927e7bcb088f4a73a6846f7d074162ea4b580999c5093f13f2416b

  • SSDEEP

    3072:dvNTN37ym4CiC3I6p/7y0GzFSwuHEWmHTS3aJsqsJE8+Joa:dH7yi5p/7y0Gz0w8sSKJyH+Jl

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0752d84e835a2125c3c0ee284404b4e9c401156c36a37ac7f0d9abc1250eb779
    .zip

    Password: infected

  • 96445ae765d1c9ef741b1987aab10b316fe12d11d7579ec237a0bb221df6f605.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections