General

  • Target

    d3afee95cc77084d2e156acd5711afbb290a6046875d959c4cfe5fbbc108462d

  • Size

    9.1MB

  • MD5

    d851342a9bdd6e802699fb8105d91c8f

  • SHA1

    25326aca3fc8d49db3eaaa65adc7ff415a790fda

  • SHA256

    d3afee95cc77084d2e156acd5711afbb290a6046875d959c4cfe5fbbc108462d

  • SHA512

    cb9aaaa8185d6770550e71232600d6b849f80d646ae1950b0d079a98568c81be9f681f3d165f29f43c673f5fadf63dbead068f759fadd2da82fd70cee5c5a782

  • SSDEEP

    196608:8MM5NNRmAFboG/EWvTxr/IAo9K9cj2ze6s7SW5BeNDz7a2/wYV89kTOk3bNQ9x:8RvmyboG/pvFqwajy6ScYz7v/N6mZw

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • d3afee95cc77084d2e156acd5711afbb290a6046875d959c4cfe5fbbc108462d
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections