General

  • Target

    3a2576374b78295aaa2b2af46e3e78bcf9f74784c3e2759f1c94b12de81b61e1

  • Size

    8.4MB

  • MD5

    35eb63082239f24fa56c425f15ec1c2c

  • SHA1

    ce56fdf3fd0c9dc85a4a162312e91f106891fdfd

  • SHA256

    3a2576374b78295aaa2b2af46e3e78bcf9f74784c3e2759f1c94b12de81b61e1

  • SHA512

    e183ea2dece61b1bdb916464ec67689da1325e000ca49b806c5dc0d43c9e4481f405becd2edbc93654d99d9987eb4bbc8bcb819d39b6457c641fcb86c4780307

  • SSDEEP

    196608:3pt9VWIZAnGkibqxKRwS7k7BX2WEwc3APEfkofUofj0uPO:3f9MItkibtWywc3f7BO

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 3a2576374b78295aaa2b2af46e3e78bcf9f74784c3e2759f1c94b12de81b61e1
    .zip
  • RPA截流大师红薯一键克隆/HPSocket4C_.dll
    .dll windows:5 windows x86 arch:x86

    b9e0a4d4ab733f3a99273f6ef9363116


    Headers

    Imports

    Exports

    Sections

  • RPA截流大师红薯一键克隆/RPA截流大师红薯一键克隆.exe
    .exe windows:4 windows x86 arch:x86

    fe361d01e72aff95af8e5346400888c6


    Headers

    Imports

    Sections

  • RPA截流大师红薯一键克隆/Temp.dat
    .exe windows:4 windows x86 arch:x86

    27941048f93f0242a6fc4cdc5eb69eca


    Headers

    Imports

    Sections

  • RPA截流大师红薯一键克隆/libwebp.dll
    .dll windows:6 windows x86 arch:x86

    9d39640f847a86c81107afefa71ac45f


    Headers

    Imports

    Exports

    Sections

  • RPA截流大师红薯一键克隆/密码.ini
  • RPA截流大师红薯一键克隆/配置.ini