General

  • Target

    5f358f1d4097cd4fba5f9471b5d9ec45dea47378a9bd7f619efbb72e76a4650c

  • Size

    1.3MB

  • MD5

    cd0f9c4db827d32995903944534b8c92

  • SHA1

    210e9ff5798b3439fc074e50881b1dac79d7d0d1

  • SHA256

    5f358f1d4097cd4fba5f9471b5d9ec45dea47378a9bd7f619efbb72e76a4650c

  • SHA512

    4f9cc1db42da571f11c30125d99cb10dbf1dccd3a5ab1bb61f0ef397109ca8ce1783574d8a7a2316ab1a00f0091ce9058458e3febb4276334fb18ecfec345ef3

  • SSDEEP

    24576:WdKs/PIb88+zA+0770jRH9fuH8XXbgnrR3L2cruXeQTT0zZU9gfX6K:Wdv+8rM+077Id9GHQbgVL+/OzfKK

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5f358f1d4097cd4fba5f9471b5d9ec45dea47378a9bd7f619efbb72e76a4650c
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections