General

  • Target

    e7a43106e2246aa61ebdb5227471791c82e9cb948b223a7c908c0d684e67a4d3

  • Size

    13.0MB

  • MD5

    379cdc639c13f0d15f1fcac7898d1a3f

  • SHA1

    accd6d32e3817174a5de9df14d2b6b991be5ca79

  • SHA256

    e7a43106e2246aa61ebdb5227471791c82e9cb948b223a7c908c0d684e67a4d3

  • SHA512

    50b1254fa0a8ec08b82054844ce42a746957cc672b4e66d2791340d21ca1b761f42ed12296cffd751a5cf702e2e25e79f1a51932ff131661e8077f92a8941c53

  • SSDEEP

    196608:B5w7vAwXCBpMauihpRvtwwzv9tgZQoGGcb3pvkH83FZfiBMwTEwnNzKwPVlQ0K78:MSJhnT9tgahgGzAMwg6KsVe0t5gQ4a

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • e7a43106e2246aa61ebdb5227471791c82e9cb948b223a7c908c0d684e67a4d3
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections