General

  • Target

    a6378cafc9acd121dd43dd60d77ebaa9928a3334afc54941d253e90d15bf3b0c

  • Size

    546KB

  • MD5

    ef11efdf897a3c221357ea25c74c5bb3

  • SHA1

    18daac1bf519ef417cada7d6e89c3b0ec67c7cac

  • SHA256

    a6378cafc9acd121dd43dd60d77ebaa9928a3334afc54941d253e90d15bf3b0c

  • SHA512

    47b1da9dfa2721700cd460533d3b5bcc5c80427d6e4c15eaf4453eba452f4fbeb6d9948c2822568a42275b48d0dfa7b5d6dd879d856884fc20864a20f7704ebe

  • SSDEEP

    12288:bAkrDkMyHpGL7dmB2NXie+IsDh74nEfDzLunujmVPs5LHM4as:4Le7dmpIsDF4nELzHCViLHM

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a6378cafc9acd121dd43dd60d77ebaa9928a3334afc54941d253e90d15bf3b0c
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections