General

  • Target

    ab717692b50bc7659777985e891669b918d16f0a94cc4a9f579a5ce17c1a2f07

  • Size

    121KB

  • MD5

    8e5ffcd82567d2c19c295c923d0f03c5

  • SHA1

    0716f3dab80c7303448947d194f6827402bdbdae

  • SHA256

    ab717692b50bc7659777985e891669b918d16f0a94cc4a9f579a5ce17c1a2f07

  • SHA512

    ff2043ec41314cfa04c40b291a2ac39d789aa5bf4e86d48a86c30b416c25f0f566f539b4506dd3cb6fe323671be00031d45600eb3a315b6af538885d018a6f2b

  • SSDEEP

    3072:Sy2eqf8OrAR7XGamrnktWyzzjUub7aOpOa+hWQIj:S3eFEyRb2Osa+Rk

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ab717692b50bc7659777985e891669b918d16f0a94cc4a9f579a5ce17c1a2f07
    .zip

    Password: infected

  • 72aa8d18265109bfa5401eff0108e55dc59e3334aa278e54e00bb3718a0212a3.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections