General

  • Target

    2ec90ef325ebb0687a5159b641c6762d2d05594f94f73986f758d171302603f1

  • Size

    13.1MB

  • MD5

    3081245f0f87304b3b14e9e6ce52585f

  • SHA1

    d7b670a30a1ef2b3862bed9e9b5d52644eaa6470

  • SHA256

    2ec90ef325ebb0687a5159b641c6762d2d05594f94f73986f758d171302603f1

  • SHA512

    9db440e6fa1cbeb7eee831333b121aa54ccc77b5634fb92990102e03e8a6586453e2e7318aac3fbc1c311f57f1b18910cc24dea6ad99882b30bc9c387c812859

  • SSDEEP

    196608:hVeVk5drwTci01u2lWzaOSylZxS3hg5jSUaxFw8U1CXLYCrl9Pdmzv91CKZ1Q8El:hQ6ti01Ga87x/5j2hdUaafPLEfkK31

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2ec90ef325ebb0687a5159b641c6762d2d05594f94f73986f758d171302603f1
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections