General

  • Target

    ecf3936b75d11e4e2013b126c8bc7e4e7a6a410925ba29741e919088c65c8f16

  • Size

    87KB

  • MD5

    38dd29f0cfa03604161145250ef92aed

  • SHA1

    56a3be52d164f57ef5bf7caff4681db0febdefd2

  • SHA256

    ecf3936b75d11e4e2013b126c8bc7e4e7a6a410925ba29741e919088c65c8f16

  • SHA512

    a75f6465fdb2ff034e5f7051de4abbacafe78651e99c32eccf4a2804b52d674b38dfbb17f79c59a5f4f6b01c74039876d66cbc662e13ce478e901b3fba0412e4

  • SSDEEP

    1536:D3ScSeuCQ5CvP3ErbK0GsA1Irn6ykkXERklFceLnFaswUemjmh5WGiirTb9Qyzi:DSleucPUXKhsmIGZkXYUJFg5fRiaTRy

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ecf3936b75d11e4e2013b126c8bc7e4e7a6a410925ba29741e919088c65c8f16
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections