General

  • Target

    6551da197044f53baa37b467067dbcee9a21e0e4638515184fcd39eb2d1d13da

  • Size

    119KB

  • MD5

    e91dab3359629ebccad376c0a697800e

  • SHA1

    9bcca284b088813f2a01f09cb66c724750080787

  • SHA256

    6551da197044f53baa37b467067dbcee9a21e0e4638515184fcd39eb2d1d13da

  • SHA512

    5f1730a0481e06e91c24d502a26f88e1ce69d4d4c4c4a034b5c6550da4313bcf7888a870b4b76c52dafdaf6ad484cfde46c675e30b0dc05ffb7996adb8d998d8

  • SSDEEP

    3072:OLvrSvJh3nNu8kJQZq/3vUA3mDvftLC/kP:ObrWnNuHKZU3vmDE/kP

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6551da197044f53baa37b467067dbcee9a21e0e4638515184fcd39eb2d1d13da
    .zip

    Password: infected

  • 760c15e7ff0ac2bd76f5f1de223a16aaaada083445ccae77339ab66f98e58bdf.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections