General

  • Target

    88271e7c4acb5501f39d337aef98f9450cfdc2fb13a6657c9c5fc1d9fb9a4873

  • Size

    36KB

  • MD5

    36059eadc36b2226b3c6f4f530a3143f

  • SHA1

    c927658937ab3a14d67a07b8222985c2ace06268

  • SHA256

    88271e7c4acb5501f39d337aef98f9450cfdc2fb13a6657c9c5fc1d9fb9a4873

  • SHA512

    1b0968b90ccb9f8e6f2daae299cd0ab665f16023c2d503c6f6a9f4e8119db8feefdfb609adaaf4b0a41d08d12cc7a083cb3dd80029843d8ed6f054e160bb4cf4

  • SSDEEP

    768:p7tQYVLHDMZ4ZZZSR4TsyMh14ohpyzbtGkoZCBOaOC4Y0iW:FLIC7ZSR4TsyMhnpyz4YVQ

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 88271e7c4acb5501f39d337aef98f9450cfdc2fb13a6657c9c5fc1d9fb9a4873
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections