Overview

overview

10

Static

static

10

LH_0818_备用.exe

windows7-x64

10

LH_0818_备用.exe

windows10-2004-x64

10

LH_0818_正式.exe

windows7-x64

10

LH_0818_正式.exe

windows10-2004-x64

10

蓝屏修�...��.exe

windows7-x64

7

蓝屏修�...��.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2a44e3e8ab7b948f5785be549f72ea9d783b5f9348f3f8403ad0f16418e3d133

  • Size

    117KB

  • MD5

    39523913b48356904969ec2c39bc3f50

  • SHA1

    7e751d90f168053acc44faab9cb596599e1c7b5f

  • SHA256

    2a44e3e8ab7b948f5785be549f72ea9d783b5f9348f3f8403ad0f16418e3d133

  • SHA512

    445487c99a4327bd1b95b80d281205aa0fc60d59ad4281b3462dc637aa95c725c90a8ccd78d6337b9f322c6b8efe4d01eb466c91e7b12414c454bcd3090ae4da

  • SSDEEP

    3072:GRzgvwFw126eRfHvYT+tWNwmpiMStm8Uo9IvQ+Nr6tf:GRzTe1jeRfU+8NwmQ5FYbNs

Score
10/10
upxblackmoon

Malware Config

Signatures

  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 2 IoCs
  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • 2a44e3e8ab7b948f5785be549f72ea9d783b5f9348f3f8403ad0f16418e3d133
    .zip
  • LH_0818_备用.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • LH_0818_正式.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 网吧有玄武的打开我下载使用.txt
  • 蓝屏修复（先运行我，在运行软件）.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections