General

  • Target

    a88ca8e3f7b41eeb0b6087a229e83394e1c9019e1229612eefb3167e6f7b0116

  • Size

    1.1MB

  • MD5

    412b95c3f45e1fc074666d5c040cda9b

  • SHA1

    a9052bcee326982c508893eda21e78a05f19c0f1

  • SHA256

    a88ca8e3f7b41eeb0b6087a229e83394e1c9019e1229612eefb3167e6f7b0116

  • SHA512

    b0f8b82dd2c220299388db37f79a66001ee917e737fd962ccf641c48ee0de014b1083629fa31a83d7d6e6a551c188727694f90d4ba7cf3d577947582547227e0

  • SSDEEP

    24576:42bSaxT9nA3clA/hzsKN/MCy5FTbCNDpJrgaxQHe37/m9h:zbS8ZFQTECg+NDPQQjm9

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a88ca8e3f7b41eeb0b6087a229e83394e1c9019e1229612eefb3167e6f7b0116
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections