General

  • Target

    703c467db659a594aacf4a16f8cf5ddf78825c9de22d64cb99521dbdc719b2e9

  • Size

    137KB

  • MD5

    8debcc2f580e76ac6231230f9a41ab95

  • SHA1

    73ea356e49f5a5e74d97d0507365ea10dc43bad7

  • SHA256

    703c467db659a594aacf4a16f8cf5ddf78825c9de22d64cb99521dbdc719b2e9

  • SHA512

    9e369ff2e90c291961ea66fb805e23209df23f6640f107f403ccdc96d16500293608200a5e673c5db6bdf115ef5592aeee4b3e734b55e7ec46bd97d4c90b1edc

  • SSDEEP

    3072:iFbAr2upzueLgi6VUWhqKGS1WWCI6l0qXj6FITafVm4LFdik8yJ:+bq8eEi6VUWhqKGWCL58LLFg3yJ

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 703c467db659a594aacf4a16f8cf5ddf78825c9de22d64cb99521dbdc719b2e9
    .zip

    Password: infected

  • 6db986c2918bb61f7093a335666fd42ffec583ad8ec46a4f22316d18fbf62815.exe
    .exe windows:4 windows x86 arch:x86

    3bb3093a5eeb1047bbdd41c02a894dbe


    Headers

    Imports

    Sections