General

  • Target

    258d6fddb71f2b0bd9af93fa88016e00N

  • Size

    9.7MB

  • MD5

    258d6fddb71f2b0bd9af93fa88016e00

  • SHA1

    4b4979a7b5684e7f0af4f1da059425c11a05231f

  • SHA256

    e52096617af399510fdfddc6e8a0e05fc7e6ffdf89152194a71b40e427962d11

  • SHA512

    b3db20052b7ef30e242d15c1e2468be855c31ecce16ab245d0c40679edc99c4dc50f9be0c3b2ff920866123c9d8af3da202ab90497bcf7b4c19e94ce5f529026

  • SSDEEP

    196608:K2c1uwl1CPwDv3uFhi43v13uFnCPws8S/VW08Sr8lQeY3YgOFmknGzwHIPHd9DPK:KnEwl1CPwDv3uFY43v13uFnCPwa/VW0E

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 258d6fddb71f2b0bd9af93fa88016e00N
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections