Overview

overview

10

Static

static

10

@创e下�...��.url

windows7-x64

1

@创e下�...��.url

windows10-2004-x64

1

暗巷PK10....2.exe

windows7-x64

10

暗巷PK10....2.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a806accb4b2268fc74bfcbe55f2615f9_JaffaCakes118

  • Size

    380KB

  • MD5

    a806accb4b2268fc74bfcbe55f2615f9

  • SHA1

    ccf62d18410355c1b89dd9189050dba542109f53

  • SHA256

    3c745d358ed7a6940b4e919d8bb050c47b9447bc3ad7051c361f52e3e5d55b79

  • SHA512

    07553fcf821bac0b78affbf0c0781da1eb6683476d6049144b265aeb839015035b8a349ef83934bf44b89bafb05c067f5fbf573fdb06664b41ec7d6cf9ec1c80

  • SSDEEP

    6144:dQ0lwPJPpJ5aEU7fxa2jqHZBk4UYBwBWqV1fuUm3JfBDiQLODFPdt0n5ixfZjnuh:dQM6fA9aqq5ETVUH33LmPdtIiNch

Score
10/10
upxblackmoon

Malware Config

Signatures

  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a806accb4b2268fc74bfcbe55f2615f9_JaffaCakes118
    .rar
  • @创e下载┆十年绿色无弹窗安全.URL
    .url
  • 暗巷PK10北京赛车追码器V1.2.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections