General

  • Target

    1c9b703176562d9cd9a637070137a4ef8b5a5d7e0df32f3b12c5c4a2e2153101

  • Size

    1.4MB

  • MD5

    a78853a8d5f1382e0f84b7dd249596c5

  • SHA1

    4d37a7eac91b6de8ba539a748b5e666b71ee4ba2

  • SHA256

    1c9b703176562d9cd9a637070137a4ef8b5a5d7e0df32f3b12c5c4a2e2153101

  • SHA512

    03d7fbc6f9dd6db57b1808c9c8fb71ee3a2131dfff7fc3b0049cd19986ce1052a559209a684a34b1aa8f8166c6483a1d85ee456cb6edc5f76bd6a1a4f4abcd2f

  • SSDEEP

    24576:4l6NcSLQXStaBNmaSP5V7ajdQKu1i6jeRt/XsD2903APv5v7MsP95hzNUH9eF3H3:E6WSUStaBNm7P51Di6iRgO0Kv57BP958

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1c9b703176562d9cd9a637070137a4ef8b5a5d7e0df32f3b12c5c4a2e2153101
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections