Overview

overview

10

Static

static

10

05bc1a9877...82.exe

windows7-x64

10

05bc1a9877...82.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    05bc1a9877e9fa780d50764095365a7fa28ea1aca47bb1a12e88a08d90dd0482

  • Size

    14.0MB

  • MD5

    006f0f7c702adba2a53f017222b9dee5

  • SHA1

    29ec0deb2fcd711d2326eb5789860cc3d803dc4a

  • SHA256

    05bc1a9877e9fa780d50764095365a7fa28ea1aca47bb1a12e88a08d90dd0482

  • SHA512

    b1e92ac4c44e917039862ef002049e75932c32610a96b71e29638b6435d8bca047f34b9292fbd75a9555858973250e6d51a8020a4a5967566e3bff2e9821bb86

  • SSDEEP

    393216:vkys9yqrm2R05UJiDbHP5PT27hEOf7ZJ2xLdYUuPzMIew4aPJA7q:c99ZsCcDbHP12rzz2xp16oqJAu

Score
10/10
upxblackmoon

Malware Config

Signatures

  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 05bc1a9877e9fa780d50764095365a7fa28ea1aca47bb1a12e88a08d90dd0482
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections