Overview

overview

10

Static

static

10

Trojan.MSI...PA.exe

windows7-x64

10

Trojan.MSI...PA.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Trojan.MSIL.Poullight.PA.MTB-1d0c2228e4f710999bd97385b1595cd48bc9b79a837a01eff63efb470a1f92baN

  • Size

    3.1MB

  • MD5

    3be8fa0b38501cdb368c5cf5a0615880

  • SHA1

    52083abf2794b5f6f8a429ef5bf5fa552896832f

  • SHA256

    1d0c2228e4f710999bd97385b1595cd48bc9b79a837a01eff63efb470a1f92ba

  • SHA512

    4d60b1c7d41f9a03147cf1d81640d9b6cd09078c9a8e1634006f505c95cf81a3f0a2f3f31b6c925fd9c90be6c733cac7a54cadf19b0dd0b63ea2b2d8a78ea5bd

  • SSDEEP

    49152:eFnAp4kyST0QX9i41ZmCq6M+s8KuqGaX0ToIBAUZLYRXcYz7NWu22wS3BNM8:eFw7ySwQX9iC4n0JBAUZLuMYz1BN

Score
10/10
blackmoonpoullight

Malware Config

Signatures

  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 1 IoCs
  • Poullight Stealer payload 1 IoCs
  • Poullight family
    poullight
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Trojan.MSIL.Poullight.PA.MTB-1d0c2228e4f710999bd97385b1595cd48bc9b79a837a01eff63efb470a1f92baN
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections