General

  • Target

    c45416c716e8d18f404cdffd089a7925e5c4652531be61ff1cff9aca57d7d3b9

  • Size

    431KB

  • MD5

    4df2ec96ad38bb190c45e846b801c129

  • SHA1

    9c4b1abd151e7d0f66d1e680fb6b7305fc4a9228

  • SHA256

    c45416c716e8d18f404cdffd089a7925e5c4652531be61ff1cff9aca57d7d3b9

  • SHA512

    4b3258eda4892b82723067537e927702301c3daa883321e50ef44ad9ef84ee2b7175c22c8f1426daeb86351cd52fd35959ec40ddc81ddc456be98da5f264a9e7

  • SSDEEP

    12288:IXi0ig1VCpPgYO+TqxeqFcOH72olHki9o:IXivg1VCpZOCqxkOH7TB+

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c45416c716e8d18f404cdffd089a7925e5c4652531be61ff1cff9aca57d7d3b9
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections