General

  • Target

    4c036084512c54b4e1dde60d6e750dc0c8af025ad6915f47b367efc4a8c3dc91

  • Size

    546KB

  • MD5

    3e2f3127e39a42e82f88e2db24fd6a5b

  • SHA1

    3212b1bc60cee048c68c4c72c6fec1bee2db0200

  • SHA256

    4c036084512c54b4e1dde60d6e750dc0c8af025ad6915f47b367efc4a8c3dc91

  • SHA512

    6913f55e29588c8b3a3ad96ad3586fba8557a5033f1f36db1bf7724699a897227b020d0116406ffc43a0ac67bfe3b5830e9f8b1bef771b359787fae48f22dc7c

  • SSDEEP

    12288:Pjo8lM6NAoL8sLN1GhLjYXm0wDOYSUIYBjhG2awNnAhAV4:7oyLXGLkXxQOg/FawNnAhAV

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4c036084512c54b4e1dde60d6e750dc0c8af025ad6915f47b367efc4a8c3dc91
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections