General

  • Target

    27058f8db4fb43c860c8a577a9be59d6605c1a6409148dc93b1595dbe6ec625c

  • Size

    92KB

  • MD5

    fc7f3efce86c8f8ec114513c151cc8d6

  • SHA1

    606e81a18e905e54b6d3cffa2e45696392f77251

  • SHA256

    27058f8db4fb43c860c8a577a9be59d6605c1a6409148dc93b1595dbe6ec625c

  • SHA512

    c4447898e962e57e5e30b8bb111bdb735af7a168896303b982e6ffa9c99bfa769792e4ad068c11d875a484d4537471e5ad050eae597e8f0dad6c3b2285727baf

  • SSDEEP

    1536:Q/vTGudTe5k4Lo8KI2Z4yNcR5Mpk7WO9f2zXGYxTIx9JL8IoQ6CqZphkJ:Q/bhOrBKIq4XR5Mpp+fw2CIx9JLYpkJ

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 27058f8db4fb43c860c8a577a9be59d6605c1a6409148dc93b1595dbe6ec625c
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections