General

  • Target

    075adefcd871b35ae3d0b51849d8f89b181043c3665820ac20d6ddd9ef95db52

  • Size

    1.0MB

  • MD5

    85db08b28e8d981f04e3759bfe033e00

  • SHA1

    130c5b9eaf8288ea674f9dca3d05de273890bdb4

  • SHA256

    075adefcd871b35ae3d0b51849d8f89b181043c3665820ac20d6ddd9ef95db52

  • SHA512

    fd834adc3758d871c2480936fdcbb93f7176d710dd60996db1f01313297d1ea4dd774966c6937794b25918ad10391051e5405f7096b0a67e63299dff66b65969

  • SSDEEP

    24576:6TBPC6j90bvEFDamPa98aN0Ef1cuqvdew8e1Cj7TL3n7JMvXn7KY10:Qq6jabchamPcNovQc8j7TLXdM37KYm

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 075adefcd871b35ae3d0b51849d8f89b181043c3665820ac20d6ddd9ef95db52
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections