General

  • Target

    75c3f46d373cc405ab0cedabc1b09c4dd918c9198ec9a3d259bdf8048b27d409

  • Size

    87KB

  • MD5

    2016c0739625683c12dc658c833060a3

  • SHA1

    f8c7e13858e1c8d32bd53c618d70ddb6fd169af9

  • SHA256

    75c3f46d373cc405ab0cedabc1b09c4dd918c9198ec9a3d259bdf8048b27d409

  • SHA512

    ad20844ddf2bf0bb63a63c47fa4d07b4158509ded1fdaca35f33b6ab6e12cdd318d0bf011653e903f74c76b598f4707ce51f1c3666eed35f33ddafd2acb2a1d8

  • SSDEEP

    1536:Lxos1lS77S/87BJM2pThWf9DcqZmR8/bMxnONDjYseXPmo06/i/XdVw/ik:jjfbcRkbMVu7EqQ/H

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 75c3f46d373cc405ab0cedabc1b09c4dd918c9198ec9a3d259bdf8048b27d409
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections