Overview

overview

10

Static

static

10

61f671f8ed...bb.dll

windows7-x64

10

61f671f8ed...bb.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    61f671f8edfe4a81e63ff2a056a784b060231aa10c061e64819c5018860125bb

  • Size

    431KB

  • MD5

    c9e6e91c96484051370f7d0d7fa1b202

  • SHA1

    e0d5da3d23cdbc7f5696a2dc5676ef8f2ea1469c

  • SHA256

    61f671f8edfe4a81e63ff2a056a784b060231aa10c061e64819c5018860125bb

  • SHA512

    d032fb85a033b25a0837f855775c88c5092dd8879ed0eb2bfb10c5cb9de46470be7e7711482522f1f103f42fed53c28e671896738ea02d23617c1fb280a4b40c

  • SSDEEP

    12288:IXi0ig1VCpPgYO+TqxeqFcOH72olHki9i:IXivg1VCpZOCqxkOH7TB0

Score
10/10
upxblackmoon

Malware Config

Signatures

  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 1 IoCs
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 61f671f8edfe4a81e63ff2a056a784b060231aa10c061e64819c5018860125bb
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections