blackmoon | 2d04be6d0b684c9c116f9f72696c15e91240ea4cded41ad6a72da6e29c35b283[.]exe

General

Target

2d04be6d0b684c9c116f9f72696c15e91240ea4cded41ad6a72da6e29c35b283.exe
Size

89KB
MD5

28d9183f17f18655ad1b77eaf006ac50
SHA1

cbcb9be8ae343f977c56f94a84e00c9b0c0e2aeb
SHA256

2d04be6d0b684c9c116f9f72696c15e91240ea4cded41ad6a72da6e29c35b283
SHA512

4bab4b79095f2542f369c28a28ba2aade894e4740767459fd2b7749ded439e970591f14282ead29d5a533925c6b9deb3db492af2458b413d328ba049dea0b32e
SSDEEP

1536:5+4hkM3Yz8wMZhUD2XsjEQWOSkE+Ct6WKBex3GWU5FkWp+AmQwKGSZhCQbIo/tSP:dq6OLM3QasY5Ft71fqWWp+efG4hCQrq

Score

10^/10

upx blackmoon

Detect Blackmoon payload 1 IoCs

Processes:

resource	yara_rule
static1/unpack001/out.upx	family_blackmoon

UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2d04be6d0b684c9c116f9f72696c15e91240ea4cded41ad6a72da6e29c35b283.exe
unpack001/out.upx