General

  • Target

    5b96395d4500af4032155b843c5c65eb9c3b54c463cfdff6e037677b86a52548

  • Size

    826KB

  • MD5

    abe1532a221fc599fbf40d3576e72a56

  • SHA1

    20164af7d46b24175ba88a13815df68548c9642c

  • SHA256

    5b96395d4500af4032155b843c5c65eb9c3b54c463cfdff6e037677b86a52548

  • SHA512

    95802e7bf71fc7d51cac8861b113f990f54b812ad71005fec4665b9af9ec001c767e4f24144b1ffa9c8b487ea2dcbc16e1e11ac09614cef0d577ca8df4bf09ae

  • SSDEEP

    12288:363wP8U1/M+r5Rdp2JX/xASW6r2mCEl8nF6z5Ky1VkPXHQdGxV/db0uwG0x8CJ5/:35idX/ximAFs5Ky1VkPXHPh0Lg3Zu

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5b96395d4500af4032155b843c5c65eb9c3b54c463cfdff6e037677b86a52548
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections