General

  • Target

    b6f9fbf8076a30f4c074be26b627ab22ed46e391c9ac271ce7bf30f21c11d831

  • Size

    13.4MB

  • MD5

    5f23b193bffcf9901731b14305715c39

  • SHA1

    68b15723491df4fb7541e4acc1993d78a3e551fb

  • SHA256

    b6f9fbf8076a30f4c074be26b627ab22ed46e391c9ac271ce7bf30f21c11d831

  • SHA512

    254f431f5ff5536ed9936413d97164a23a59ab42c1057cde42aba80df089600fc2f1ea2d02d6f46b6134ba0342a586c19017717eb15494b53806b16e89bf5848

  • SSDEEP

    196608:drB+zZ3+A5hav4vX9NJ1UJfwIB/8vc5mrMe+OxUiIsPM7UfwQYCrl9Pdmzv9i+JS:dAZ3+A504fHfckZrMeTxeC0aaQxU

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b6f9fbf8076a30f4c074be26b627ab22ed46e391c9ac271ce7bf30f21c11d831
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections