General

  • Target

    faa6ff2cbff914b11c213699e24a9883d92ddfaf3cadaba0cc6872ae24b568ec

  • Size

    545KB

  • MD5

    074cb0403873fc07738183f7ef6db1fe

  • SHA1

    2eef2305b3c58212c921035523a180e06d0df28e

  • SHA256

    faa6ff2cbff914b11c213699e24a9883d92ddfaf3cadaba0cc6872ae24b568ec

  • SHA512

    78a848143a7d890ff15e77eaf153f1c6c59a90b87ba228aba98aa8f7c4e04d700d6580d39d078e0da8c68a12e98632ea7a47cc2cfe9d3054ec8461b07f83fe5f

  • SSDEEP

    12288:mD66XShaVSoULv5bznGLs4+lmQbmsdpg+bqKUp/XxJa:266ChiSouMs4+lmQTdK+bRw/Xa

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • faa6ff2cbff914b11c213699e24a9883d92ddfaf3cadaba0cc6872ae24b568ec
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections