Overview

overview

10

Static

static

10

64fb452e2d...a0.exe

windows7-x64

10

64fb452e2d...a0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    13470578de9551539fd4135d978d0533.zip

  • Size

    2.2MB

  • MD5

    37fa0d44efc24cb375c766c61a05edcc

  • SHA1

    7f5888f7de3f1aa298975b13f2b5094aeb180fb1

  • SHA256

    b8d4e4efb583490b87417cd75713b163d0f271e114d2e4b0870841be60b54a11

  • SHA512

    b53e36fd73175b7798eb81a5c6d70be60f55ee04c7fd44ea879e1455fdede92e5f2352130bd9ebbcbf84b21f061f059d91abdb85a0f30638dbbda60c8622262d

  • SSDEEP

    49152:BqhDN07j0kxYR2N93Aa7GurIPFsh/3oXRhLoNAexO9H2b+ZtJqE:MGxYR2N9Qa7z1138nkVxOUbe

Score
10/10
upxblackmoon

Malware Config

Signatures

  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 13470578de9551539fd4135d978d0533.zip
    .zip

    Password: infected

  • 64fb452e2ddd537c723da1c3da985ec714926682cff1ffe7ff145eac58df9da0
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections