General

  • Target

    6731540ce67a93f961efffcec9005e418b9a6acdf0683d4c2c03b1c6e45bae31

  • Size

    13.4MB

  • MD5

    627a57f3a025e76195d4171456158a0e

  • SHA1

    a44c374a6a58c3e393a26bcd8008640b0afb238a

  • SHA256

    6731540ce67a93f961efffcec9005e418b9a6acdf0683d4c2c03b1c6e45bae31

  • SHA512

    dc68ac7a58ec94ff0be8ee220d1aad3f87d6f93bcdc19393aec522cb38beffc9fb5c035f8110e314b159130357e40f3328c966504b219d406eb076a86c17f241

  • SSDEEP

    393216:nr9ikPkil7Ut9mQbU57VB4C1XpK9v3NPIFaVfUN6uvb:rcoF2QCe4CVA9v3CaV8N6s

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6731540ce67a93f961efffcec9005e418b9a6acdf0683d4c2c03b1c6e45bae31
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections