General

  • Target

    f2af31b74bfe1648b8c06ce5b3869e81ce8caafe4a265e007af4036af3448ae7.exe

  • Size

    3.2MB

  • MD5

    2311a69113104a760d785a79f45bab74

  • SHA1

    32e883771883ba44715180e92a20c80638c5c78f

  • SHA256

    f2af31b74bfe1648b8c06ce5b3869e81ce8caafe4a265e007af4036af3448ae7

  • SHA512

    aafbd53acb886e6ab7706400852e8b79766ae99f5899b45952dc21cc55d91f0dca2d86e25f2568dc2b497a73a9c7e70682f98d8901c8089ac5650e46e1dd87e1

  • SSDEEP

    98304:+5cZe7uQ3mmGOBUv/np/MobFO62BLNBtq7clfJrmf2Yy7:+5t7uwB6f1Vv2BRBSc3Set

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f2af31b74bfe1648b8c06ce5b3869e81ce8caafe4a265e007af4036af3448ae7.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections