Overview

overview

10

Static

static

10

新浪顶贴/Hxlf.dll

windows7-x64

7

新浪顶贴/Hxlf.dll

windows10-2004-x64

7

新浪顶贴/data.dll

windows7-x64

1

新浪顶贴/data.dll

windows10-2004-x64

1

新浪顶贴/djpf.dll

windows7-x64

3

新浪顶贴/djpf.dll

windows10-2004-x64

3

新浪顶贴/djsb.dll

windows7-x64

10

新浪顶贴/djsb.dll

windows10-2004-x64

7

新浪顶贴/hfdd.dll

windows7-x64

1

新浪顶贴/hfdd.dll

windows10-2004-x64

1

新浪顶贴/pihf.dll

windows7-x64

1

新浪顶贴/pihf.dll

windows10-2004-x64

1

新浪顶贴/sb.dll

windows7-x64

1

新浪顶贴/sb.dll

windows10-2004-x64

1

新浪顶�...��.exe

windows7-x64

7

新浪顶�...��.exe

windows10-2004-x64

7

起点下载.url

windows7-x64

1

起点下载.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    e084c8fa1390d1d45bdf8587cb356363_JaffaCakes118

  • Size

    301KB

  • MD5

    e084c8fa1390d1d45bdf8587cb356363

  • SHA1

    9094286fb38b86715ada84defa2e6742795e9cd9

  • SHA256

    d6dd68077d4eda2898ac2f2cd617a88fb4463bc83d9876d6755dd7707ddd00b9

  • SHA512

    759570f0a6d71c5534fc0124697c2d64004b57153ca9a501d07bde01d464014438a1256a5b686632b3978f5d14ff41e8fa094646af1ecebdb6055879daf19729

  • SSDEEP

    6144:3YFiAxuj0i9L1CaRiHUxMlarCE6MFRog7y+rSHAn55eD3Vg+Z8+vqE:IFiL0ezRiHUxLnFRog2Ug6mDu3+vh

Score
10/10
upxblackmoon

Malware Config

Signatures

  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 1 IoCs
  • ACProtect 1.3x - 1.4x DLL software 2 IoCs

    Detects file using ACProtect software.

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • e084c8fa1390d1d45bdf8587cb356363_JaffaCakes118
    .rar
  • 使用前必看.txt
  • 新浪顶贴/Hxlf.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • 新浪顶贴/data.dll
  • 新浪顶贴/djpf.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 新浪顶贴/djsb.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • 新浪顶贴/hfdd.DLL
  • 新浪顶贴/pihf.dll
  • 新浪顶贴/sb.dll
  • 新浪顶贴/新浪博客自动顶贴评论机.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 起点下载.url