General

  • Target

    2a7f62c121f15935cfb80537c6762663677b431949688ac5d7f38dc9aa0a4d73

  • Size

    848KB

  • MD5

    bf8ab2ae9de6100f43e3eb2982598848

  • SHA1

    7d63a25067172b4ce315fe180e3ec8a35b4cd6dc

  • SHA256

    2a7f62c121f15935cfb80537c6762663677b431949688ac5d7f38dc9aa0a4d73

  • SHA512

    97d0bad3d0907d83c1b4adf73ec2b50392f8bf42afb5db30ff407401fd3cc34621c847f1111fdcbd17b76f8e47ea8b2fa8871d700ef640a8676c035525da7423

  • SSDEEP

    12288:36tv5qt7ito/3NpAgjbM9mPMjjoZOrAF2WHBBiT4W/jSn13e7N1Tk:36txqRiKv3AWbswIoZOjImT4QjsOfo

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2a7f62c121f15935cfb80537c6762663677b431949688ac5d7f38dc9aa0a4d73
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections