General

  • Target

    1dfb15a6e4c3f352e74deb1b0c50bd4a5f502d1544280bf6d4201a09f13f65d2

  • Size

    9.2MB

  • MD5

    ea9cc87c56542a3afd75557b8c90dc01

  • SHA1

    83962898e9b7f16dafff6ca64701e5086abb5bee

  • SHA256

    1dfb15a6e4c3f352e74deb1b0c50bd4a5f502d1544280bf6d4201a09f13f65d2

  • SHA512

    5ec7e0285f42388ea46b8645e9e205384c55ea7381a5653d4af19e287370058aa081f2fcd6780d32932c59b8f3d751a6a99182a43aacff949e43ca1f5313581f

  • SSDEEP

    196608:Vvwv30KJvcBHS0faUUmhIgolTNkt+tE4N0m9ca7Nwr3O8Fp51ewZMJGokL/rUELc:VvwkYvCHS0CfmUL9N+aJwDOCpbejeDrm

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1dfb15a6e4c3f352e74deb1b0c50bd4a5f502d1544280bf6d4201a09f13f65d2
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections