Overview

overview

10

Static

static

10

5fb07cf84b...f8.dll

windows7-x64

10

5fb07cf84b...f8.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5fb07cf84bee790d1c12de45f0968471a19b8f6ff1bdbb8952a1d1d4f0e6adf8

  • Size

    432KB

  • MD5

    209b801f06fd65706086a2d3fb72a328

  • SHA1

    7a8038586b443b10c23d698b882f2eaae0304efc

  • SHA256

    5fb07cf84bee790d1c12de45f0968471a19b8f6ff1bdbb8952a1d1d4f0e6adf8

  • SHA512

    44de370ada3d810ad9e530ac5f7ae556338415f304c53e54f7ba48d37b7613ee3d7370193b17f8c274654472bc64e8f20f344751ca8d57b92c15d86e2c784350

  • SSDEEP

    12288:kov9YJjrV+pJR6cuXFqaYCL9yKASIAcl3hkWWlyvQi:B+JHVyR6xXky0KASbcdh6yvQi

Score
10/10
upxblackmoon

Malware Config

Signatures

  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 1 IoCs
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5fb07cf84bee790d1c12de45f0968471a19b8f6ff1bdbb8952a1d1d4f0e6adf8
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections