General

  • Target

    59f065ccaf7a2bc0567db4cc5a748be1acfe8008810296a7cb0ce996ed24c98c

  • Size

    448KB

  • MD5

    f66563b99b85fe502a5a029c41204ee0

  • SHA1

    29758d6d9b5594623af5cb2a5643bfb6377e7a16

  • SHA256

    59f065ccaf7a2bc0567db4cc5a748be1acfe8008810296a7cb0ce996ed24c98c

  • SHA512

    a71c22b8a3777cad346663ea2d62880b88c42d6a89ec49f4747a448f1689b2b96ce2dd8c0c364d0a071e944d015eafea150b39af39539855e1fa73518647f54b

  • SSDEEP

    6144:KWujBwXqZu4R6sl01F6ovBMyFyhk4BvD1vLv/Zp3DU7cDb/fKgI8Qzs+CMNrEcTp:bpXIZSP5qzrpxpA4DbKgaJjr+Hcb

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 59f065ccaf7a2bc0567db4cc5a748be1acfe8008810296a7cb0ce996ed24c98c
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections