General

  • Target

    12556e09819f214cf45e65b6e32c9b4fc1a33f470c687244bbc2ed14337d4a0e

  • Size

    13.3MB

  • MD5

    4e7bcd4f78dfb881ada10f9c47825540

  • SHA1

    44228bebaaa8739c7e4dd70f0e53ae0e162f5ec5

  • SHA256

    12556e09819f214cf45e65b6e32c9b4fc1a33f470c687244bbc2ed14337d4a0e

  • SHA512

    647f1c408d3a293900504dcfe00fb2a4d5aa185e94ef95c628054837163eb986cf24ed5f6441ab24005b15456915d3e27823ddd60e829efba2e1a05ece53f4ea

  • SSDEEP

    393216:5lHlkm8OYsGGbqkdLT2Pbmb6vQm8sTf249NuQfv4:5t2S5/dn234mxlPf

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 12556e09819f214cf45e65b6e32c9b4fc1a33f470c687244bbc2ed14337d4a0e
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections