General

  • Target

    5df758c0ca88a3df61d0b7d2ea79bf5be29f3ca6fc9293ef5b8ae796bc9fd9ec

  • Size

    13.6MB

  • MD5

    e2ab52253eee7b466cbddd6a443e3f43

  • SHA1

    1e1598f4d840cdcdf1c8a239db18bb36bc898a0b

  • SHA256

    5df758c0ca88a3df61d0b7d2ea79bf5be29f3ca6fc9293ef5b8ae796bc9fd9ec

  • SHA512

    bde6a7f405eeb8c3b2d9a93d1e11076e526174ace56cf047bf73693646b33f336ad6acf3f7a6a34fea0c0539cbb1aaf0a19a65ffae867257705a78f2e4bd6d17

  • SSDEEP

    393216:ZyC94/IjLaKfRtWgk+3I5wN96tTtZI4tUHGZHrgHTsy:gC9MIjLaqnWFGI5wqjtUt4

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5df758c0ca88a3df61d0b7d2ea79bf5be29f3ca6fc9293ef5b8ae796bc9fd9ec
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections