General

  • Target

    5a4999233f9c88b4de472b2ffd2a3900N.exe

  • Size

    304KB

  • MD5

    5a4999233f9c88b4de472b2ffd2a3900

  • SHA1

    a14af350e4ae8c5fbc1690ce5d3d5dcf3a85a43d

  • SHA256

    5d6e67ce755a08e54ce7c994244560beb0dc6e2b25717728e493afac7c9cbae8

  • SHA512

    01a94f01c6794acadb4492e1cac5d75e1ddb3dc1b60e30f2a2b273d178dc8d967ac020b8376079bebba5234df742bc53f6b9fac9c8ce3f75539a9fa01f79487e

  • SSDEEP

    3072:cp7sopjh6E1M4bI58XAxFtttttttttttttu8:Avjhb1M4bk8QvtttttttttttttT

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5a4999233f9c88b4de472b2ffd2a3900N.exe
    .exe windows:4 windows x86 arch:x86

    4c014f2429f67ef5747809820c0ee0a7


    Headers

    Imports

    Sections