General

  • Target

    cf14086b7bd7f9b3b125686fa02c9edf4f6cd241fd12d1ff30d7a52b5db96d9a

  • Size

    89KB

  • MD5

    7a9654b8fd4f41f1b804d37a01122966

  • SHA1

    eb4efc058abec1ec95efc3984ed257bd6bfddcff

  • SHA256

    cf14086b7bd7f9b3b125686fa02c9edf4f6cd241fd12d1ff30d7a52b5db96d9a

  • SHA512

    a5560a8dc617e816cf7bab2882004f77f023ab35ef30ac96bbd497b6e8e59a55893d80a89a602f84a29a6923149665222982574fa9fc09bff1d560bb8f03214c

  • SSDEEP

    1536:5+4hkM3Yz8wMZhUD2XsjEQWOSkE+Ct6WKBex3GWU5FkWp+AmQwKGSZhCQbIo/tSI:dq6OLM3QasY5Ft71fqWWp+efG4hCQrx

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • cf14086b7bd7f9b3b125686fa02c9edf4f6cd241fd12d1ff30d7a52b5db96d9a
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections