blackmoon | virussign[.]com_b2b4520f75f025f34ea3a080dcbc4ac0[.]vir[.]exe

General

Target
virussign.com_b2b4520f75f025f34ea3a080dcbc4ac0.vir.exe
Size 6.3MB
Sample240618-v5ll1stakb
SHA256 fdf018ab608fec42237f49de54f6c0471a83e61540b4d914d3cadfb7c2022dd6
MD5 b2b4520f75f025f34ea3a080dcbc4ac0
SHA1 3430c4a8fdcad8b2c58aeee8c7817dafb25a1d3a
SHA512 7bc2273c52b76cfec74d5d7a342fb734f6eb1322e34cba305c5c2ab2b51ce2ca2d267529693f498db8ff3ea00bd21046555a96ef45d988d0477d493d35de8b96
SSDEEP 98304:zv3apmo1Y4+6Y7SOEfX/SbgRHLGS9mKG35nBnEQWoYIsaOyk3xm:Ta9+6Y7SOEibgRXmKGlBTYSOyCo
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Detect Blackmoon payload 1 IoCs

resource	yara_rule
sample	family_blackmoon

XMRig Miner payload 1 IoCs

miner

resource	yara_rule
sample	xmrig

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
virussign.com_b2b4520f75f025f34ea3a080dcbc4ac0.vir.exe

SHA256 fdf018ab608fec42237f49de54f6c0471a83e61540b4d914d3cadfb7c2022dd6
MD5 b2b4520f75f025f34ea3a080dcbc4ac0
SHA1 3430c4a8fdcad8b2c58aeee8c7817dafb25a1d3a
SHA512 7bc2273c52b76cfec74d5d7a342fb734f6eb1322e34cba305c5c2ab2b51ce2ca2d267529693f498db8ff3ea00bd21046555a96ef45d988d0477d493d35de8b96
SSDEEP 98304:zv3apmo1Y4+6Y7SOEfX/SbgRHLGS9mKG35nBnEQWoYIsaOyk3xm:Ta9+6Y7SOEibgRXmKGlBTYSOyCo
MD5 SHA1 SHA512 SSDEEP

Detect Blackmoon payload
XMRig Miner payload

miner
UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

37939

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths