General

  • Target

    49b2fd8db2cd380f3203d03bef99abc7.zip

  • Size

    106KB

  • MD5

    89e8df58c612ac618414647e2067ea33

  • SHA1

    74349a38b51d9e68455c161db1a3177b215ef524

  • SHA256

    092cbcfbd658ed484d8adcb24b66bca33051a0613acc36567b9c297a439eb9a5

  • SHA512

    7e7d84ec46dc49191be989f0216481fc646091820a30e226e880a245384637a7d0895dbd2ec210e40bd2de6abf5a50d03c6cc2c726dfe9cfc5c44e31e3c12a24

  • SSDEEP

    1536:awb532/nIo/6TUOif89d3yZ1ZNQlaxXnGirynIvMfWyxzqUo+H5+MeXZuK/VlB2y:x2/I1UzA3yZ1ZOoZMsSW5fvZnPBHX

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 49b2fd8db2cd380f3203d03bef99abc7.zip
    .zip

    Password: infected

  • 41bc22d69070da500e58e0e493dd6d39dcb03679277dff05f893b6f7fc60867b
    .exe windows:4 windows x86 arch:x86

    Password: infected


    Headers

    Sections