General

  • Target

    1ec6a769414e802c29d1e71000a9524400df9926b8a74b58058a333ab4c40165

  • Size

    1.0MB

  • MD5

    59bdfd1172a3bae184245cbb0a6ea0b9

  • SHA1

    5d016341f703d8c042b9a0692522be76dd5e0068

  • SHA256

    1ec6a769414e802c29d1e71000a9524400df9926b8a74b58058a333ab4c40165

  • SHA512

    3b8ac8851c47d759bca7d1bb5834fbb0437d2761f2cda0d4974699231341017c9d9214b3c4639d74fc6ce7d9acbaac0ec6a55bb1e4d4f754f0b27f5926b74b89

  • SSDEEP

    24576:rgPQqW2ON/eR0t8r5COpEr44BZ+qG5npJYeYHywArwBN4F7Y7npTss:rgPhW28eRK84Op244BwqG5pmeQwn2nN

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1ec6a769414e802c29d1e71000a9524400df9926b8a74b58058a333ab4c40165
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections