General

  • Target

    018a34a31646a71cda796fe5b018802c7edfdfed780b6159e4811842d86a42ea

  • Size

    3.2MB

  • MD5

    510b4e0da101a35eef21c6579d2277a4

  • SHA1

    3d57951543f47eaaff6c05369c39fae60ef85b70

  • SHA256

    018a34a31646a71cda796fe5b018802c7edfdfed780b6159e4811842d86a42ea

  • SHA512

    c7e1b50ccae6c60a41629a5c20e1125f169b38e75782f4af38cef9cadf4b22a68b79f630fe9add3082348916b5699a68e0efae5d7345d88ab1ac6592d7de5626

  • SSDEEP

    49152:omff08WD6haKVf1o50Lh83sPbg+QC5m1ezC/Xy+06VZB+GGmaDPZTvJs2vl6l8TN:5og1FhECrmwso4pG9Pdvl6l8Tn6M

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 018a34a31646a71cda796fe5b018802c7edfdfed780b6159e4811842d86a42ea
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections