Overview

overview

10

Static

static

10

e607cdb3be...a1.exe

windows7-x64

10

e607cdb3be...a1.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    dc4b821110e20925d3e073084db61e78d860d1ed0f4fe03bb34bcf2fb32666e6

  • Size

    3.7MB

  • MD5

    dfa4e50db1f4dde8ff0463c0aa291f00

  • SHA1

    6502662c649052468310b015dfcba48d0cc1a31b

  • SHA256

    dc4b821110e20925d3e073084db61e78d860d1ed0f4fe03bb34bcf2fb32666e6

  • SHA512

    71f97ee67dd23992f170dde77794a7f498c6dd40756ee1661bb077c0c4b599634e49962062462f795e4c1b0a93d1ee51e17f7b4da4199c44033460b41008a903

  • SSDEEP

    98304:/mg/z2N3bs6d93eLmRLXcv1wh3DprkVIl11Ruu:eg/gbJjXC1wVysbRuu

Score
10/10
upxblackmoon

Malware Config

Signatures

  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dc4b821110e20925d3e073084db61e78d860d1ed0f4fe03bb34bcf2fb32666e6
    .zip

    Password: infected

  • e607cdb3be5f0304d51153a63a471e65323bbebdef22c30060334206a14ffca1
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections