General

  • Target

    2024-06-14_905c07a74478803bfc98e72f6a3b67bc_blackkingdom

  • Size

    12.1MB

  • MD5

    905c07a74478803bfc98e72f6a3b67bc

  • SHA1

    58a5a76917c58dc80d23d1c5ff4be93980ac930b

  • SHA256

    b7b4b426e6b43ec96bfe4b8381b3ac4c372cf1598c7c676a31a9f3a159d297ce

  • SHA512

    eb978381cec710b2dfb93bbaaae48b9f080f46beb1208cb81576e4f5259f4e3e411300a9b5d6f9635e901f122e2038986622046b8608301343ff2e3b4004317e

  • SSDEEP

    393216:Od9c5hlEK/PNKwtN3ZWyp032LOqKT1SnV:OXEhxtKwtN3p232LOqKS

Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-14_905c07a74478803bfc98e72f6a3b67bc_blackkingdom
    .exe windows:5 windows x64 arch:x64


    Headers

    Sections

  • 0xfff.pyc