General

  • Target

    c10bab0ab14916e09297efcee48c329469a95bb3f50a60a0a89f434394a7ab2f

  • Size

    8.8MB

  • MD5

    818d5b9755e017a608a0a0448a194cd6

  • SHA1

    4aae384b933f6ea4070f4410324059afc633cc58

  • SHA256

    c10bab0ab14916e09297efcee48c329469a95bb3f50a60a0a89f434394a7ab2f

  • SHA512

    b556353cd5cf89e8dd3b7375db1a4ee8779a8d01997c7d7b9d019ec0f24c107f6f14ced32b2ee316b442173cb94b09cd1a253ac457fb5be495238dd42affaa75

  • SSDEEP

    98304:TRoeO6XTBJYazImknGzZr+HIPFtmOZ9G17xwFB5URUSKnaSOdroSCa:NoeO6XTYxmknGzwHIPHd9swFBubKT

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • c10bab0ab14916e09297efcee48c329469a95bb3f50a60a0a89f434394a7ab2f
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections