General

  • Target

    f80df7223b12db1cd19626deba32ff70N.exe

  • Size

    597KB

  • MD5

    f80df7223b12db1cd19626deba32ff70

  • SHA1

    ad9f9204a0e6c933aa895289078025ba05f82dcd

  • SHA256

    6cf83ab86746adde088ddac160e94b4d0c049669f85ba7c39820d5b50c7586a7

  • SHA512

    b57723ce0d4a0fe40337b7293c40b74afca7aee7a1ddb73594e6add0cb1d2c133bd7d155962121de39d444586acefd607c030587952e19869e08b5b002f84f47

  • SSDEEP

    6144:3O/P9QWgEzuqSKqdQ8eGfC5IeuJgP2egd/NLICG:3eQDnKqS8eGfC27i2egd/WCG

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f80df7223b12db1cd19626deba32ff70N.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections