General
-
Target
37d8e1ce3b6e6488942717aa78cb54785edc985143bcc8d9ba9f42d73a3dbd7a.zip
-
Size
18.6MB
-
MD5
2e95e6e69df47fc8e4b6acba82745bf8
-
SHA1
c82569d9e3e77902d4f3d5c8b5875cf716d31fde
-
SHA256
80b60adcb2dc293e0f83c28dbd4ffb2c1a3088e895466529abb9598328598a61
-
SHA512
9094b9d9f04afc6c4f65f5dea204482b4eda2c5b484d8b152efbd3bef297209e1e250f341ed42496473882ec296ba5bbba7a3e90a172fe1ee204aa53354fad89
-
SSDEEP
393216:YUw2XE/E37Hfkzcz/HcMoxXvACrNWhttLqHuG9msovtm8+T2FSjfFxpzIroB+5YE:YUw20s3zKVxFrNUGEzvtm8+T2FwPpzIt
Score
10/10
Malware Config
Signatures
-
Blackmoon family
-
Detect Blackmoon payload 1 IoCs
-
Nanocore family
-
Njrat family
-
Detected Nirsoft tools 1 IoCs
Free utilities often used by attackers which can steal passwords, product keys, etc.
-
NirSoft MailPassView 1 IoCs
Password recovery tool for various email clients
-
NirSoft WebBrowserPassView 1 IoCs
Password recovery tool for various web browsers
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
37d8e1ce3b6e6488942717aa78cb54785edc985143bcc8d9ba9f42d73a3dbd7a.zip
-
37d8e1ce3b6e6488942717aa78cb54785edc985143bcc8d9ba9f42d73a3dbd7a.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections