General

  • Target

    7b2edcffe6d1fe99cc269ad3e10438f9ece03f89034b02fc1397a7ed06fabb47

  • Size

    1.9MB

  • MD5

    da717e4516d9e395c688c03ff542a077

  • SHA1

    fbed84037afdbe62b6ae3d258e52b2484be2b59e

  • SHA256

    7b2edcffe6d1fe99cc269ad3e10438f9ece03f89034b02fc1397a7ed06fabb47

  • SHA512

    db6435b9c86d0034865e153c56f769964d5408785d5c7f3fcf7360a132dde54d8b7a4dea553f6e5678df1bb81006f2a79e84e2bb7d750e87bdc756cab30aed3b

  • SSDEEP

    24576:BWBlBCPmxP4rquXSHQ4gZ4xNISlRlYpJv0LdeVu6nM5fpCJ6DfVC/iUE9Q27t9Rz:cNCm80hRmfeZQJX/Tm

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7b2edcffe6d1fe99cc269ad3e10438f9ece03f89034b02fc1397a7ed06fabb47
    .dll windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections