General

  • Target

    7ce965abc6531c0bf6ba6942856a5aed4443cf794d1aa4aaab4f76bd576df20f

  • Size

    137KB

  • MD5

    5eecde06faae38c68d723ac949984d43

  • SHA1

    24fc1b77ea521ef856f0ecd8fa9dd644d58d85f6

  • SHA256

    7ce965abc6531c0bf6ba6942856a5aed4443cf794d1aa4aaab4f76bd576df20f

  • SHA512

    32090702ac4cf068d5b7b192089ae8e65318e1ec70fe5185a22c7079f712c463e6fd21ff632c56c910e7ea649239573092e6bab93736ae1e4a417ac7d15d329f

  • SSDEEP

    3072:q2cBfrU8DbQqiZmLaAkYQlaYE/yoezYX5boJc9Gb:iBfrUmwmLaACJCrX5qqGb

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7ce965abc6531c0bf6ba6942856a5aed4443cf794d1aa4aaab4f76bd576df20f
    .zip

    Password: infected

  • d80456fb7c7a5e59f4ac96cb980e42cfae2fa85ceea57ddde075e09929d427b4.exe
    .exe windows:4 windows x86 arch:x86

    3bb3093a5eeb1047bbdd41c02a894dbe


    Headers

    Imports

    Sections