General

  • Target

    53ff95b8bd51691720d963872bbbb6303767e501514167cfd39faeef5e7dd69b

  • Size

    572KB

  • MD5

    54de89db667c3a93436a82c0c986c95b

  • SHA1

    2e1488aea36158b61be1381b1cdc7506adb0040f

  • SHA256

    53ff95b8bd51691720d963872bbbb6303767e501514167cfd39faeef5e7dd69b

  • SHA512

    4574ea3519c2a0af279bd23ebbbccca3f47c91d6daf1749a4d83f38539171c80c827f2ee4310981d2066e61aa86fc460195f4e1472646e742e60b26a99542574

  • SSDEEP

    12288:qvbnOI7c/bN9ADX5XCYknFb7b8SEgNP5tjDZiZ2KQdBFF0:qhcN9ADX5X2b3zNP3jtiodj

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 53ff95b8bd51691720d963872bbbb6303767e501514167cfd39faeef5e7dd69b
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections