General

  • Target

    ad5716866aa103533b7fa74fdd21078ba5281892913705a958db7ed2529536df

  • Size

    13.2MB

  • MD5

    022c1bacf3793c532640232d84d2034c

  • SHA1

    864ac21462353414ebc95094058a6c8b1b5f3b15

  • SHA256

    ad5716866aa103533b7fa74fdd21078ba5281892913705a958db7ed2529536df

  • SHA512

    5d7ead9870cda2de020cb0b208b91caed20f16c825442af325a7acb1bb55bbeb0924042fb5dcdf954e8ea510d728add238dbc89b85a7da3fd52db43c1b16b61f

  • SSDEEP

    196608:E6T6msXanejzgxvwBkjPuJ1VFxNw6sIevkBi0Lf8TmkLh8qCfaVgXyolaXEBwL+Z:EaKnoVi/1rxNYIT3LfCm4CPiK

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ad5716866aa103533b7fa74fdd21078ba5281892913705a958db7ed2529536df
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections