General

  • Target

    80e68c0c76897276dcdf3c829b06bd70_NEAS

  • Size

    92KB

  • MD5

    80e68c0c76897276dcdf3c829b06bd70

  • SHA1

    bdb3390c0b13b7f2340b902ac8cd8694e017b719

  • SHA256

    1212c9401900b42f8a59d10fc9a9ee81c7fede73b2c91260c27d18f8310290bf

  • SHA512

    0ce47d256e1407a4b8ceea1d912e37564e0d249fee8258f117a551e48b1878b0c695686743642a7677781943a92c2133fa2ee783fdf5f5cae2185e810866e5b0

  • SSDEEP

    1536:Q/vTGudTe5k4Lo8KI2Z4yNcR5Mpk7WO9f2zXGYxTIx9JL8IoQ6CqZphk8:Q/bhOrBKIq4XR5Mpp+fw2CIx9JLYpk8

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 80e68c0c76897276dcdf3c829b06bd70_NEAS
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections