General

  • Target

    4a809af97bd24e5565435f5f3b0e82a30756a6709f9540e248e61feaa154dfb9

  • Size

    1.2MB

  • MD5

    d65d53c156540947ab0f32cead1a203a

  • SHA1

    858c3157e7b25eb150774f25998810df8fc7b184

  • SHA256

    4a809af97bd24e5565435f5f3b0e82a30756a6709f9540e248e61feaa154dfb9

  • SHA512

    2f2c1468529444f6af74a923a1a3e014dd33f1f233a44970a174935509da9ff5733f45ba911f6963e2c5e6a016ad0b8a21bc4027092511b48596d3969786fc1d

  • SSDEEP

    24576:dXUxgH5dMKQyFnjgB0quA6zYUu331o014x9eg6jvBZ1jt80fvhSV5IqQzIv:L5dhvFnE2k3Uu3loLEg6RjttSVv

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4a809af97bd24e5565435f5f3b0e82a30756a6709f9540e248e61feaa154dfb9
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections