General

  • Target

    0554f3698f8d34b233323a2b37467b157801db8a92730be6d9cbacdf1f677683

  • Size

    448KB

  • MD5

    04407da6fff1691cbea68fe8c484aa90

  • SHA1

    67ccdbdd31f8ba4ec740bd05d1be9fb27295ef52

  • SHA256

    0554f3698f8d34b233323a2b37467b157801db8a92730be6d9cbacdf1f677683

  • SHA512

    eb1346867d653f039647f5097c239948091999d149bc23ad372249c9ec9cbc7ead2b286c2dd607f1a063246b60e9ecba60da74bc14877a5166d84b82a6f6dab3

  • SSDEEP

    6144:XdpBfhfxZFksBbl83e7imtQ5VF9FhV6e8ZXXdpA3A4H/4/QcRyiGrLajYn/DI2dm:XVhfx9hpYfdEdQjT2Gv/Ddox8

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0554f3698f8d34b233323a2b37467b157801db8a92730be6d9cbacdf1f677683
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections