General

  • Target

    c16eb6670f29ff6665dfb026e4438c119c0c55e7b5d5d66aee9311a989615512N

  • Size

    80KB

  • MD5

    8cfa8e7334c202857fb9677243a91c20

  • SHA1

    2934bd7a067cce381bd1dda9e31bdcdb37f81553

  • SHA256

    c16eb6670f29ff6665dfb026e4438c119c0c55e7b5d5d66aee9311a989615512

  • SHA512

    af56a36b9ec45874db3435a817f5d1b6eb10396e5f0dc82cb648413d083faa925ac2c9fdbc8b4699135afe1e48150584d7ca8c8886e900da99de7fa2b2ac2886

  • SSDEEP

    1536:ITJxjZZ29Up2U7O0Ov15+o46zqMi9G7WXnQQvaWh3zWKfx/t126a63H:SHZ2up5JkH+o46LuRXnLdpzp/tg6Z3H

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c16eb6670f29ff6665dfb026e4438c119c0c55e7b5d5d66aee9311a989615512N
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections