General

  • Target

    2e9db7cb8ddb9cf6f047d647dbef1f950f68a3223b72572c66dd5063a522bea8

  • Size

    461KB

  • MD5

    a4ec5603e5cbbffaf5a6750f19fa923d

  • SHA1

    93cfd038d085b7379392eda218dbb085974f8ae3

  • SHA256

    2e9db7cb8ddb9cf6f047d647dbef1f950f68a3223b72572c66dd5063a522bea8

  • SHA512

    8ea8291751f9b76858b4bbb0bbe3d782fedb0bdb2264b88e2d6778f58e159c7ccc18cea1171c3cd77356847a5cb2a712e1e7a3702eb5b1768c557201700e2264

  • SSDEEP

    12288:4vBL4UoeNvj5b0Wqk0pEPmMEm03N96ppE5SPwc2P:4vRyeNvj5oWaE+MEf96pOuwc

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2e9db7cb8ddb9cf6f047d647dbef1f950f68a3223b72572c66dd5063a522bea8
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections