General

  • Target

    231c903fa599ebb807fc95b7b8357e6baaf2d922246d28e4b13c835466750bb6

  • Size

    544KB

  • MD5

    3c8f3a4cc93987018b4a9f577d5fdc95

  • SHA1

    77b46ce4124fda1603d39186430a4934b07dc428

  • SHA256

    231c903fa599ebb807fc95b7b8357e6baaf2d922246d28e4b13c835466750bb6

  • SHA512

    c3d5c94ed47a3cece5a667c49c2968628e49541800b89ad617b415894f47b016d43b5ed913eb0e645014382f58f3d21eeb4bf3ae9d3752b91af000b37c999007

  • SSDEEP

    12288:QKXUHntYYrlJL5agy5pVKFi2N6rmKZfKJqJn8vFkBYwbAtEBV:BXUmKfL5aV5pkFfNSmgNJ8dktk8V

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 231c903fa599ebb807fc95b7b8357e6baaf2d922246d28e4b13c835466750bb6
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections