General

  • Target

    5c044bdd332a4a8c0e4f61f9ac22ffa382fef25f93392bafcaeb0d575132dd46

  • Size

    9.1MB

  • MD5

    ad01785abc8add5dbd2139adc15d4672

  • SHA1

    8a936160c965e86cfeef6c987cd1acdceaad656c

  • SHA256

    5c044bdd332a4a8c0e4f61f9ac22ffa382fef25f93392bafcaeb0d575132dd46

  • SHA512

    b257cdf79904222a90b5ceb33fe538dace8a4611a54036f2bf9f8554b795938ee09be6ebc730bc122452b6b31eda37c24686d64b694874d7b63993748cc244e3

  • SSDEEP

    196608:UbsJivFcx1dugfUR2l8Bf5bsLV2dqYTGjb76937FOc+zYJpwLtcMP6vxQ3L:UbXvFcxDugx8BMABc7sIc+zI6uxQ3

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5c044bdd332a4a8c0e4f61f9ac22ffa382fef25f93392bafcaeb0d575132dd46
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections