General

  • Target

    cb41599edbb9f1ee4a666d1721c3a0aac923f11fa52a2dbab188fa374982d260

  • Size

    1.9MB

  • MD5

    5a1ffbc2508471b364bba3a5915a47cd

  • SHA1

    21a3190e330dc6a4840ce8e01b1e8a9beaf8c0d4

  • SHA256

    cb41599edbb9f1ee4a666d1721c3a0aac923f11fa52a2dbab188fa374982d260

  • SHA512

    b7adcc0b243a2b4a3faf944f9500fa944bc1041141ce2364d268884d5fb8d107ef3e02becfd1519c4eecabd7febbc6adf0e8ae1adb77a38c3d9131826b61b466

  • SSDEEP

    49152:IVYZ/JLLqcM5TG43qeSmZLHB38at8E5DjD43upiSjj5on:OYZJbmqVm9B1Fs329

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • cb41599edbb9f1ee4a666d1721c3a0aac923f11fa52a2dbab188fa374982d260
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections