General

  • Target

    df4d3f008e127881d7ce56f36a274230N.exe

  • Size

    705KB

  • MD5

    df4d3f008e127881d7ce56f36a274230

  • SHA1

    159f29d48076c6ec3378ba3e89da4df1d5386e1c

  • SHA256

    e386001c4d2c6f5a0a132b7d711ce0f5a2ce2435008bdf2ce989b66401de0e1a

  • SHA512

    1d2479c50250dde4df149a644647532d26f7f1a6a2e9a6d9fd9284065a357497deb315bd061a41108c5b0e95cdef20e160fabf2d1713a0efe62e6305e719f0c8

  • SSDEEP

    3072:Qq2tXJ9RcljwJ2Getu5m6RVCZ13X7PtmG:ZuZ9Qjjd6miVKpXBL

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • df4d3f008e127881d7ce56f36a274230N.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections