General

  • Target

    152b55f01b073d99e5041ade8c954a82492f5f0113d63e5c0ef7715e86d41ad6

  • Size

    826KB

  • MD5

    2fc7e67604304c2a44820ba464cff98a

  • SHA1

    45199179a9c71f79b7730e73eeef6e4329e3a89a

  • SHA256

    152b55f01b073d99e5041ade8c954a82492f5f0113d63e5c0ef7715e86d41ad6

  • SHA512

    36bf191f9b661bd73014b127acef9af8aa56ae0a162145ead7ae4596fa6b9c6c226a8884c2d0162b8edc81b9a9206dc2cb450954ec19fb18ee6b4444583f99e6

  • SSDEEP

    12288:363wP8U1/M+r5Rdp2JX/xASW6r2mCEl8nF6z5Ky1VkPXHQdGxV/db0uwG0x8CJ5q:35idX/ximAFs5Ky1VkPXHPh0Lg3Zf

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 152b55f01b073d99e5041ade8c954a82492f5f0113d63e5c0ef7715e86d41ad6
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections