General

  • Target

    80534d00f35f2104c5c8879064ffb9b0f57e15e3fc90940ca5875b7dff74e958

  • Size

    141KB

  • MD5

    b6946cb4bbacf95e9e78fad40705ab91

  • SHA1

    6354579c8e52e7267b943c112ee78442ab8e89fa

  • SHA256

    80534d00f35f2104c5c8879064ffb9b0f57e15e3fc90940ca5875b7dff74e958

  • SHA512

    19fabb337c425677315c2155d21b67d49a77a6699113df2175d0b7a2a437adecfed2e1651ddd19e17db4eefdcd6d10dfd76714feb3f7846d78f34e88abb04f68

  • SSDEEP

    3072:X9LHUCfKgd0RG1X3MtOnffd1ukVbqJv7JG+zZgT5jHLlDGtk:X5/K63X3AOnHrukVb+vkygT5z5DGG

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 80534d00f35f2104c5c8879064ffb9b0f57e15e3fc90940ca5875b7dff74e958
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections