General

  • Target

    043ba3fdc65acdba8ca4d2af047465a1617d4591a9f771d5e4d629ab74736599

  • Size

    431KB

  • MD5

    5d5d2c946b00fff3240c84c2061694d9

  • SHA1

    a571aafaf56d7ade0fb02a05cde1008815046793

  • SHA256

    043ba3fdc65acdba8ca4d2af047465a1617d4591a9f771d5e4d629ab74736599

  • SHA512

    725832b0071e8f8a19029d2b5d8790484ca475c12634d307e6f5c9d0f199102d9943da62f8825600ebc932b5fb91ba752fadc7453e400103901f35aae11b1aed

  • SSDEEP

    12288:IXi0ig1VCpPgYO+TqxeqFcOH72olHki9Q:IXivg1VCpZOCqxkOH7TBG

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 043ba3fdc65acdba8ca4d2af047465a1617d4591a9f771d5e4d629ab74736599
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections