General

  • Target

    c5f6239bd4023f0594e209a3f138988d8a6890304712527e0811f5937c4f1724

  • Size

    9.1MB

  • MD5

    f9a6c4733a64e73fd56716ada090f123

  • SHA1

    4d35b49e5cd5e414eaa9e1562fbd8618d5f31190

  • SHA256

    c5f6239bd4023f0594e209a3f138988d8a6890304712527e0811f5937c4f1724

  • SHA512

    e578d81d0bd84110183781f0fa9d2ccd7f31331d66c3b81faecfe9a22b871e3072a609a8a3a2bb6bf1e10ec842e5b13589d237355ab0de2acdb736742be9f0d3

  • SSDEEP

    196608:mbsJ8gZPO8tz3jNjTKOSLTC9ZgC4ZzrmNbilViExgWJbNCOM71om:mbtgZPO8jPKdM24i+ExgOC772

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c5f6239bd4023f0594e209a3f138988d8a6890304712527e0811f5937c4f1724
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections