General

  • Target

    8a597e7041c15b27d2df310883ecf6b1229f95bc050d8468780644c6b9c9a075

  • Size

    9.1MB

  • MD5

    3b77715174437baf55d7d9ec09c45ae1

  • SHA1

    e453a041fbea5a00607fc9f48dc3b088391f8926

  • SHA256

    8a597e7041c15b27d2df310883ecf6b1229f95bc050d8468780644c6b9c9a075

  • SHA512

    a5ef4861cefed57bf0d52884672c36fc2cb74730a953ecfaa59054424a5ee0be180cb40c5fac0d1f1ed1e3914667e68b9584bec3bdcd5dd2ee153ee9a2b4db15

  • SSDEEP

    196608:7bsJ9KsBH8g09sl6686BXLVUnIwKb9vwKUSSUNO3WjUDwdRuBcjmSSQsG5WEY:7bGBH8g0qJ8Ob2IPbVwKyYmWjZ/LSRG

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 8a597e7041c15b27d2df310883ecf6b1229f95bc050d8468780644c6b9c9a075
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections