General

  • Target

    f8c4d852e54c8991e1aa7111beb670b59bddef349f5c75b183ff3288b841eaab

  • Size

    119KB

  • MD5

    be4ded26e7a25bb26a5dacc82b3f9c80

  • SHA1

    61fa9eab95848a05fe32e9c4d92d31720dd6d06c

  • SHA256

    f8c4d852e54c8991e1aa7111beb670b59bddef349f5c75b183ff3288b841eaab

  • SHA512

    98e9cac22a60a76c8f727034c181263b58475f1ff3a0164531ee99cd3a340d7d4af220fb68d7c60d8b691b959d56b7e13600b7b6f4a2116c6f361312e762c01a

  • SSDEEP

    3072:8tNPW0eWGzK4I1dgtdUjh3lgRuaE9zDFlUO:8Prs2h1itSjdlAuaKxlUO

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f8c4d852e54c8991e1aa7111beb670b59bddef349f5c75b183ff3288b841eaab
    .zip

    Password: infected

  • 76bd6b875ed2389a331f1ab31495c2e818c519dd0ce3199e8f09541972b56d16.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections