General

  • Target

    518b20df77bac7b37e1c56342be9c205b9aa937fe5043fa276be0b0a11a73cfd

  • Size

    1.1MB

  • MD5

    d5edca6a06ffb6df50b97eabb2148dab

  • SHA1

    5437378f8416e5cf7b23901d37cda3362c014adf

  • SHA256

    518b20df77bac7b37e1c56342be9c205b9aa937fe5043fa276be0b0a11a73cfd

  • SHA512

    fbcf89dc93bb596067c0a167e3c8d20c805e8b05e3da07c6cbb0d3364a03b0c05d036ef5ded5743edb77ee939df9d30c442649e4876087f78fe9669f887e6661

  • SSDEEP

    24576:ClZQVInekBXjsqTNuEkdRbgnvB/K2qoscS1ZlJGye4Ce:AQVIn9FY/EkdynvxGfle4n

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 518b20df77bac7b37e1c56342be9c205b9aa937fe5043fa276be0b0a11a73cfd
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections