Overview

overview

10

Static

static

10

edebb2146e...3a.dll

windows7-x64

10

edebb2146e...3a.dll

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    edebb2146e5ac0aa98d430bf35f137dd0557e7bd050da58d81532dda4d35333a

  • Size

    1.0MB

  • MD5

    25eb4e026f199e749c5d7aada0a2927e

  • SHA1

    dadf6a2067be7e23a31660e247be38e443ceaa49

  • SHA256

    edebb2146e5ac0aa98d430bf35f137dd0557e7bd050da58d81532dda4d35333a

  • SHA512

    67db0ea4c1d2bffefcf386d8b6e1330903c77bd68f8814632ae4c4e9ff7555ea9604411e0148c5ff4e72ca0de8c938092f0263fd743c30fdadeb2819a708a44b

  • SSDEEP

    24576:PujI7jQRTjod/2Hyqx5sNtqISYi4rtpLxV:SIP+0OHP2kPOpLxV

Score
10/10
upxblackmoon

Malware Config

Signatures

  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 1 IoCs
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • edebb2146e5ac0aa98d430bf35f137dd0557e7bd050da58d81532dda4d35333a
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections