Overview

overview

10

Static

static

10

Leaked by ...b].rar

windows10-1703-x64

3

Leaked by ...b].rar

windows7-x64

3

Leaked by ...b].rar

windows10-2004-x64

7

Leaked by ...b].rar

windows11-21h2-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    Leaked by [Serenade.Club].rar

  • Size

    11.1MB

  • MD5

    85f397658294a7d88cb83c3cd3ac69e7

  • SHA1

    50731ac5bc6f78ff1fdcf642cfac653854e0b636

  • SHA256

    087b15d96b2a86e6837631ee05bf24e81a2786df23110bd6fd468798cc904f8f

  • SHA512

    0d4407fdeca2f47b13f0d460491bfff3e13e7ced4b974a53ac1003ec3fa2e41a9c7f61c23e760e315fe5957438c1d20a428dac87463b5b3cdf62ad1e8b6863c1

  • SSDEEP

    196608:v7188PmhUwF0EARTx43WL8hbtyoUHvPeVzehQ97FUNPMsJYSrggKZ7C0ptHA:vkhUQnARWtyoovPeVCf1ZYChUB1A

Score
10/10
upxblackmoon

Malware Config

Signatures

  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 1 IoCs
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 24 IoCs

    Checks for missing Authenticode signature.

Files

  • Leaked by [Serenade.Club].rar
    .rar
  • HFS/HFS.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • HFS/hfs.ips.txt
  • Plugins/AnyFileToByte.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Plugins/CHAT.dll
    .dll windows:6 windows x86 arch:x86

    0bb677808f68748565f0b4746f93ec3a


    Headers

    Imports

    Exports

    Sections

  • Plugins/C_CHAT.h
  • Plugins/C_FILE.h
  • Plugins/C_LISTEN.h
  • Plugins/C_PRANK.h
  • Plugins/C_PROXY.h
  • Plugins/C_PROXYMAP.h
  • Plugins/C_REGEDIT.h
  • Plugins/C_SCREEN.h
  • Plugins/C_SCREEN2.h
  • Plugins/C_SERVICE.h
  • Plugins/C_SHELL.h
  • Plugins/C_SYSTEM.h
  • Plugins/C_VIDEO.h
  • Plugins/DllToByte..e
  • Plugins/DllToByte..exe
    .exe windows:4 windows x86 arch:x86

    065bb0b8f2447a21687970a3f4c81bdb


    Headers

    Imports

    Sections

  • Plugins/Example.Cpp
  • Plugins/FILE.dll
    .dll windows:6 windows x86 arch:x86

    f48a453277c58ef2ad15ba21da06c437


    Headers

    Imports

    Exports

    Sections

  • Plugins/LISTEN.dll
    .dll windows:6 windows x86 arch:x86

    aeba4d9699dbdb93b7c3b310ec6631b7


    Headers

    Imports

    Exports

    Sections

  • Plugins/PRANK.dll
    .dll windows:6 windows x86 arch:x86

    5a1cd24a0cc564c668f0e076576ef366


    Headers

    Imports

    Exports

    Sections

  • Plugins/PROXY.dll
    .dll windows:6 windows x86 arch:x86

    6058417d15a9dc4d5d57f7fc9e08936e


    Headers

    Imports

    Exports

    Sections

  • Plugins/PROXYMAP.dll
    .dll windows:6 windows x86 arch:x86

    cff395882211804e2d9bcd24e2d03936


    Headers

    Imports

    Exports

    Sections

  • Plugins/REGEDIT.dll
    .dll windows:6 windows x86 arch:x86

    26c69a8864064bc9835a39a5dca67010


    Headers

    Imports

    Exports

    Sections

  • Plugins/SCREEN.dll
    .dll windows:6 windows x86 arch:x86

    316de0276dc48557f22e8c20b297ef57


    Headers

    Imports

    Exports

    Sections

  • Plugins/SCREEN2.dll
    .dll windows:6 windows x86 arch:x86

    7cbbdfa804887ce7e6a9455fd460c5cf


    Headers

    Imports

    Exports

    Sections

  • Plugins/SERVICE.dll
    .dll windows:6 windows x86 arch:x86

    5d4129f9fbeb85867801cee9f1fcf17d


    Headers

    Imports

    Exports

    Sections

  • Plugins/SHELL.dll
    .dll windows:6 windows x86 arch:x86

    4a610d8f2145837c6ecbbc6e381cfa05


    Headers

    Imports

    Exports

    Sections

  • Plugins/SYSTEM.dll
    .dll windows:6 windows x86 arch:x86

    b746680dadee229dde7bb720f8b3704f


    Headers

    Imports

    Exports

    Sections

  • Plugins/VIDEO.dll
    .dll windows:6 windows x86 arch:x86

    035b1477a8c896c1efcbb259a6a5a7ab


    Headers

    Imports

    Exports

    Sections

  • SkinH.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • TianMa~.exe
    .exe windows:6 windows x86 arch:x86

    3a53352a7f7fff3c1c920959207c9873


    Headers

    Imports

    Sections

  • TianMa~.ini
  • Tools/Encode.e
  • Tools/MSTSCAX.DLL
    .dll regsvr32 windows:5 windows x86 arch:x86

    f4f9ea2971d7855283ab7cbcf0ce7925


    Headers

    Imports

    Exports

    Sections

  • Tools/QQwry.dat
  • Tools/SkinH1.she
  • Tools/mstsc.exe
    .exe windows:5 windows x86 arch:x86

    c9563dea574f58f47d86577e5a7f024c


    Headers

    Imports

    Sections

  • Update/Server.dat
    .dll windows:4 windows x86 arch:x86

    3532a6e0319e9e710fb9376d8e1191dd


    Headers

    Imports

    Exports

    Sections

  • Update/Server.dll
    .dll windows:6 windows x86 arch:x86

    7d0a3fc7f643234ab4d457e25e3ea083


    Headers

    Imports

    Exports

    Sections