General

  • Target

    c608817675d4e5cd516f8d50ab62a070N.exe

  • Size

    628KB

  • MD5

    c608817675d4e5cd516f8d50ab62a070

  • SHA1

    1ac936dd110daf3e8fff10469ef2bb145a12146f

  • SHA256

    9f09fe4de2f98fb30701ac85663ab271b4828be356ff9d703ac2e4f49b1a62be

  • SHA512

    b683b2e8b840a264d491996152aa99bb045072c0d68a3b39f0c4af9dbaf5949695e453bc2f305377b6e4eaacde54f93663615a828ec7d36f2d4f18fb0343afb1

  • SSDEEP

    12288:PTpucdKwF0eVNrDsQoo9vXioGv7/ycZKrLZR/coNLgd0Ri:PZMwl1YQnvXFqyLLzFLW0A

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c608817675d4e5cd516f8d50ab62a070N.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections