General

  • Target

    5df14101954560b3ce3b98e69629483e0b2085781374b38ada00a8e01b8b341a

  • Size

    9.2MB

  • MD5

    b87a5db3d2e14387114b8168754da066

  • SHA1

    eabf17f78e0e98c0dc6a1471b8a0ad67b29f94e5

  • SHA256

    5df14101954560b3ce3b98e69629483e0b2085781374b38ada00a8e01b8b341a

  • SHA512

    3c05e6be6aadacaced56b752d2afbcdbba0c1315b04ccead2ed7954972a981fbec003367e1637e34f929a86478fc5aec78c27ea2495b26c5846d24c3be21b1ea

  • SSDEEP

    196608:Evwv30KJvDRkS0AUEuqpfhKLvQ8tW05E0rrDIzCCN31qrY/uyjbz+tltK1fyB9md:EvwkYvOSbUNLx0nLz1hGEbzytK1fy3gC

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5df14101954560b3ce3b98e69629483e0b2085781374b38ada00a8e01b8b341a
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections