General

  • Target

    aedfa90edf58791589c563c1a92532c6fe7dafb1df2b6d415c5b4078c348610c

  • Size

    156KB

  • MD5

    65c361d0635ca5b93278581a4f26f30f

  • SHA1

    a38c978c9f39f6f1825c901b936e49ddccbb1971

  • SHA256

    aedfa90edf58791589c563c1a92532c6fe7dafb1df2b6d415c5b4078c348610c

  • SHA512

    e7f39621a01aa45588d05e0f8df12dd8c9c391dfcc76bd3c40c37b320ba36fa107c6f31fd14ef6a95316af4795ee70f81973823d46dbb321b4e2cd9cebf2ca32

  • SSDEEP

    1536:ej+zUtBIBU+2Da4lH4Iiue58o/ZDv4GMfcHZIlVKAn5ZAcXeOqbZ6NjkEVnouy8U:eqSe5OmiEoAcCbZ6FNoutbA

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aedfa90edf58791589c563c1a92532c6fe7dafb1df2b6d415c5b4078c348610c
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections