General

  • Target

    929196370cd2aa47d5b393c4cdada677d7bf3007aaf4fa70cbe2ee423eab8683

  • Size

    6.8MB

  • MD5

    69557291f46cec87f32e1ec284374057

  • SHA1

    f0e674ee082c3d2bba0acda31c6e2784f377ba7f

  • SHA256

    929196370cd2aa47d5b393c4cdada677d7bf3007aaf4fa70cbe2ee423eab8683

  • SHA512

    d7b916f1695365eac1b9b069eef0c9ce90a8314fe193d50e732b7e0178c7e5e3dcf4b5be592709cfeabd27cf13a4bc6ced297ee9a8f9cfe546b17b09cc0737cc

  • SSDEEP

    98304:T/WXTBJYaVmknGzZr+H3O5SEPFtmOb9G1u5v/nZVnivsAl0kroSCa:KXTYimknGzwH3OgEPH39JX/nivPli

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 929196370cd2aa47d5b393c4cdada677d7bf3007aaf4fa70cbe2ee423eab8683
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections