Overview

overview

10

Static

static

10

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a1871f4f0149065abab263411d6afdd8ae962060db732e740e956898b62cee0b

  • Size

    11.7MB

  • MD5

    422f3763021f8f9bfc31a9a7e4b049f9

  • SHA1

    d9b34b3cf62c66dd776ba5bed3abb0c409c6c3f0

  • SHA256

    a1871f4f0149065abab263411d6afdd8ae962060db732e740e956898b62cee0b

  • SHA512

    46ad02ef99385a98fd18479bf409caacf5b2f4a1d3beecfe7b85a5af893cec96a57fd8715c24bfed222e1e1dd480bd1ced0c398d5893e3d6d2caef65797bb6e0

  • SSDEEP

    196608:uBF+gGI892vAQENcXbc7zdgZpbHgCDoZ86F8l/SflHdINv2/sD/afUAbKs8hC3+q:uBvtlEhdwlHgCDoC6F8lYGJgspAbKs88

Score
10/10
upxblackmoongh0strat

Malware Config

Signatures

  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 1 IoCs
  • Gh0st RAT payload 1 IoCs
  • Gh0strat family
    gh0strat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a1871f4f0149065abab263411d6afdd8ae962060db732e740e956898b62cee0b
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections