General

  • Target

    35ffb39bc8dc9f4cc72945a6f4953efd66a95f2ab83cb35ea40302b48a73fc2a

  • Size

    9.2MB

  • MD5

    5d9332f12652c54668fd6c7c4770185b

  • SHA1

    5a70e8919c8f9b503b3222515db39b38a50a5a31

  • SHA256

    35ffb39bc8dc9f4cc72945a6f4953efd66a95f2ab83cb35ea40302b48a73fc2a

  • SHA512

    e54b122a20a287de0073c75c8cac6a791d5a4ff4bf2878cdf19c14ae8085ce371daa4ec1d16a6d388366e6a1f4bb758ea8a0864c81d139be92ed46d6d22393c0

  • SSDEEP

    196608:Mvwv30KJvhadJx4+r3UKV6bMO+UJUPFNeKw79VASTG+TznUMChvTsWtaTmB1rkO/:MvwkYvIdJx4+rxVsR+RsKwZXUMCRsWVh

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 35ffb39bc8dc9f4cc72945a6f4953efd66a95f2ab83cb35ea40302b48a73fc2a
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections