General

  • Target

    17ef739afd3091141430c4ccc515a9f06c0ae1aa16321f1c03915cd63d085354

  • Size

    9.1MB

  • MD5

    e2909009047a8dc366f1f07e34ac8c77

  • SHA1

    adfd7605042cb25d7d7b20e5139163a6d0632de8

  • SHA256

    17ef739afd3091141430c4ccc515a9f06c0ae1aa16321f1c03915cd63d085354

  • SHA512

    4d8b2c91aa2f82f8cf8b5cbaec9533d2805a342af7626ba8d2a66f8e87f3185fc93d317ee3c5c1e897bf166d0c4586ef24bd9613f59b22ab47f2707370ac9145

  • SSDEEP

    196608:MbsJDrvp8DqLgcXWZ605bQTQw9V+/YyDctzCkDqK64Cp5dxQkeOq7+x3JKoG4t+:Mb0rvp8BoVQ1otzZDbPCpPxe7+zws+n3

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 17ef739afd3091141430c4ccc515a9f06c0ae1aa16321f1c03915cd63d085354
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections