General

  • Target

    cbb61922300b86c517da6d8f54d14ada9cde08fdd83484b81f6d9cc431047a0b

  • Size

    432KB

  • MD5

    4bb9d4e9a670a8ae763d21ccf51bef72

  • SHA1

    dfa9d828208afb16d2114b2d9f37db8f31ec25a8

  • SHA256

    cbb61922300b86c517da6d8f54d14ada9cde08fdd83484b81f6d9cc431047a0b

  • SHA512

    5b075382a3a19ee40f4c6f394e645cb947d8b511b1e0966806b5244d4cddcae0131764d445f69e52642c81aecf752b1bc64a95c6ec480cdda650eb6cbb10f5aa

  • SSDEEP

    12288:kov9YJjrV+pJR6cuXFqaYCL9yKASIAcl3hkWWlyvQD:B+JHVyR6xXky0KASbcdh6yvQD

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • cbb61922300b86c517da6d8f54d14ada9cde08fdd83484b81f6d9cc431047a0b
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections