General

  • Target

    1be70b9e267287d0a959a1f1ca4f544e59b8848a8f814dce902df948d1dc0e40

  • Size

    8.1MB

  • MD5

    8ddd0b8ccd60d78e52b173c40323c7dc

  • SHA1

    a73deed521165c6f269a58a27ac8e2cadaffe96f

  • SHA256

    1be70b9e267287d0a959a1f1ca4f544e59b8848a8f814dce902df948d1dc0e40

  • SHA512

    a37f85bb25c3324dd6cdc4235fe9ad813cd32bb3961291b3f2457921db0ecb49360f67bd86d26ce71b9aa1aafd4508b8dba3db475a810e6461d0480ef16b3c9b

  • SSDEEP

    98304:TRoeO6XTBJYazImknGzZr+HIPFtmOZ9G17xwFB5URUSKnaSOdroSCa:NoeO6XTYxmknGzwHIPHd9swFBubKT

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 1be70b9e267287d0a959a1f1ca4f544e59b8848a8f814dce902df948d1dc0e40
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections