blackmoon | 2c25c74f6e95c83d05b38ff18490593a82ab252c81861637dc0a1bdeb2172b6e

General

Target

2c25c74f6e95c83d05b38ff18490593a82ab252c81861637dc0a1bdeb2172b6e
Size

437KB
MD5

18d3cb423bfa0e317a2c0445ebbb42c9
SHA1

dd6f79916556fc50828e419f25e6a2cb627f5573
SHA256

2c25c74f6e95c83d05b38ff18490593a82ab252c81861637dc0a1bdeb2172b6e
SHA512

1ef4c736f52bb325d5cffb3624336f0b0bfa61833bfa34ac69cbbd9d5a1ccc5cdd8c618e60c15eeab4d5c5ad78bd2175aa3d71ec595d03d69dc1df25e81b81dd
SSDEEP

6144:5fweR7gpANB0sv2YYuwfDoOPV1x0GwYpk09RhyQ3ZmF:J1R7gpAwsuvDNP/xyqk09TyCcF

Score

10^/10

upx blackmoon

Blackmoon family
blackmoon
Detect Blackmoon payload 1 IoCs

Processes:

resource yara_rule

sample family_blackmoon
UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	family_blackmoon

resource	yara_rule
sample	UPX

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2c25c74f6e95c83d05b38ff18490593a82ab252c81861637dc0a1bdeb2172b6e