General

  • Target

    5bca31c4e36646d59d41f4293e9a4710N

  • Size

    9.9MB

  • MD5

    5bca31c4e36646d59d41f4293e9a4710

  • SHA1

    aff185e04d8c16d8d01049c6a268445cdb432d67

  • SHA256

    bc518197cd519af845c1e28ef949103eda92d0360bb83ab19e05f6c81a3a5b40

  • SHA512

    d81e8c2fd6e596c3a8d539fa549811be26e3ae2f218f765040f82371709bdbb39427800057612cbf69ed4ecc061ac25a660cac4e3fc042511c12065bc7ccb6c2

  • SSDEEP

    196608:K2c1uwl1CPwDv3uFhi43v13uFnCPws8S/VW08Sr8lQeY3YgOFmknGzwHIPHd9DPK:KnEwl1CPwDv3uFY43v13uFnCPwa/VW0E

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 5bca31c4e36646d59d41f4293e9a4710N
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections