General

  • Target

    c7fc22715c25ff68c5d7c030ff1e6523e765a04173be1da657d3230b377532a6

  • Size

    92KB

  • MD5

    e89d1a783ecb8e0e84cfee25c167f821

  • SHA1

    627bd2baaf896fbd48d6ad17db4af4b80f51f59b

  • SHA256

    c7fc22715c25ff68c5d7c030ff1e6523e765a04173be1da657d3230b377532a6

  • SHA512

    792cd8b81ccd5efaf62838d11b04479b7fa685bbb599b7d0f1de49b4e3eee7f1f983b1dcd87530e4d9c2079be82373f8e28ba2a68f484e708b4e2de6020d4034

  • SSDEEP

    1536:Q/vTGudTe5k4Lo8KI2Z4yNcR5Mpk7WO9f2zXGYxTIx9JL8IoQ6CqZphkK:Q/bhOrBKIq4XR5Mpp+fw2CIx9JLYpkK

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c7fc22715c25ff68c5d7c030ff1e6523e765a04173be1da657d3230b377532a6
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections