General

  • Target

    5de4ef011435e8eded20efea932d950c88482791c76b4ae1ea8a181eb87667ed

  • Size

    8.2MB

  • MD5

    a24fd228fe3ba2e3f7ebeb122eb74a96

  • SHA1

    6dff48c6d8b85ed956ae6ef193928d6ab3e9753f

  • SHA256

    5de4ef011435e8eded20efea932d950c88482791c76b4ae1ea8a181eb87667ed

  • SHA512

    d34a68645cd1d3c997cec8ce1a587a739594537e05bd95e1f7bf44b228d1b5c929a91d28a5efec640f4082b8c3b7947cfd597f34d26b9b27061587ed284753df

  • SSDEEP

    98304:TRoeO6XTBJYazImknGzZr+HIPFtmOZ9G17xwFB5URUSKnaSOdroSCa:NoeO6XTYxmknGzwHIPHd9swFBubKT

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 5de4ef011435e8eded20efea932d950c88482791c76b4ae1ea8a181eb87667ed
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections