General

  • Target

    6f884a2089d5c900fb06d2c337d81ebf8aae854359ea601a1aeadc0bc700052d

  • Size

    13.3MB

  • MD5

    2784cac9bc74323b4fb1fa76981c60bf

  • SHA1

    415fcf469094499bc0a77f870f91b98ed5f708e8

  • SHA256

    6f884a2089d5c900fb06d2c337d81ebf8aae854359ea601a1aeadc0bc700052d

  • SHA512

    44687f5287d85955609deb4f9e46506fae13bdb1dfc64250ab21c24b14f98f34ab0a1cc77e969f837caff6133adb7c7a7ff0991239f0f2e0e8f65ecf9ec577b0

  • SSDEEP

    393216:vlHlPPJaLqMi0bbyAb6vQmGsTf249NuQfv4:vth8i0bb04mPlPf

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6f884a2089d5c900fb06d2c337d81ebf8aae854359ea601a1aeadc0bc700052d
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections