General

  • Target

    c9d99c89971b0e678d9413ab579d6fd12c1cf57e671c6517bbcdfc3a8485d21f

  • Size

    9.1MB

  • MD5

    4fd1945727fcdcc73a00031a069c8c8e

  • SHA1

    77611b117af5ebc65d076caf0cb883fd3ceeab58

  • SHA256

    c9d99c89971b0e678d9413ab579d6fd12c1cf57e671c6517bbcdfc3a8485d21f

  • SHA512

    c3966f763ae28659e55753126859afa505a38c6bee0390083c1077be94d68e2297e73347ccff6828ab19fdf5911e595bdd143b182151c2e41e91ca7779bc6178

  • SSDEEP

    196608:6bsJ9TkWNvaWD+9YIY6x6TYSCILZ/VENGg7H+uPmwGjx5Uk36ReFwQnxtXkBAXX5:6bEkIvaWi9zYY6A0q4S9Q2kKRjohXX9P

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c9d99c89971b0e678d9413ab579d6fd12c1cf57e671c6517bbcdfc3a8485d21f
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections