General

  • Target

    eb2e3ea960656d1f1459d9b5c79e4a669c8922d15166fa7d2dd33fd7ac25ddad

  • Size

    9.1MB

  • MD5

    cf2120646fcf624cfc93f63f8da25df8

  • SHA1

    11fee40bb6d7fe3629e466c9207387c5f988eaa2

  • SHA256

    eb2e3ea960656d1f1459d9b5c79e4a669c8922d15166fa7d2dd33fd7ac25ddad

  • SHA512

    a2ad76a5e4ddf90a89e2161d430ebeddecf40b479d1adb9fd537bda19330fab202421b2f5f8b0da503de071e6639b1cc7f2b7e899dba7ebbca81a69bd1f6a71c

  • SSDEEP

    196608:nxLAhaRsPePH5mxHjiERxNUQ7JSepfp1RTOaacDPQ:uSsm/5mxH7RxNU+jRracDI

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • eb2e3ea960656d1f1459d9b5c79e4a669c8922d15166fa7d2dd33fd7ac25ddad
    .exe windows:5 windows x86 arch:x86

    b0a2098d5f613453b3ed424a78570020


    Headers

    Imports

    Exports

    Sections