General

  • Target

    df9b3b405693fd842940735fc1518fea80d535b067cf90339dc13f70b5681784

  • Size

    15.3MB

  • MD5

    2d16a9921202700ab3a54bd1489de26b

  • SHA1

    dbd55987de586d1efb8245cfe26157b4c7e7ce38

  • SHA256

    df9b3b405693fd842940735fc1518fea80d535b067cf90339dc13f70b5681784

  • SHA512

    20bbc99cf16936c923aaac908b42793802f96050b2e4904b50ee602df2af44259802ec393372bde4ff38e4d274733e3655a249b149e22727bf3769f11809d201

  • SSDEEP

    98304:VmiZ4p0+FCjLHRlD0+FCjLHR1cacv0+FCjLHRl0+FCjLHRl0+FCjLHRl0+FCjLHX:VmiypEHzDEHvnaEHHEHHEHHEHQ

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • df9b3b405693fd842940735fc1518fea80d535b067cf90339dc13f70b5681784
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections