General

  • Target

    9646dc6b2172d554d635457d60bf9af6fd462d539a43af209a86c5674199d263

  • Size

    848KB

  • MD5

    35f9a134b811f29a385a4c52c4f4b6b0

  • SHA1

    8046abe244be7941cb48dc200fe4208efc76389b

  • SHA256

    9646dc6b2172d554d635457d60bf9af6fd462d539a43af209a86c5674199d263

  • SHA512

    bb26f7d63569a25f8760bdaab2e26a39115d3fcca7b3eb5768cf3b8d43a942761fe34d132d463ece78ac8171684c53cc41d99fc37015d922b4df63a2eb6ffcdc

  • SSDEEP

    12288:m6tARzkjUEUTHX6UUbtwk56PT17lrP013e7N1Tk:m6tARzkWqbtjarPyOfo

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 9646dc6b2172d554d635457d60bf9af6fd462d539a43af209a86c5674199d263
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections