General

  • Target

    864d8a990c01637ed695556de0d2c3ce41eab9f1c35f937a2c9b7337782f4239

  • Size

    8.7MB

  • MD5

    abac9ffbfd45a7cb8e1dd989796b6cf6

  • SHA1

    2fe4b9d0a958b5adbd6799698c5c3a8c79b573b9

  • SHA256

    864d8a990c01637ed695556de0d2c3ce41eab9f1c35f937a2c9b7337782f4239

  • SHA512

    787ba4f12f6e183658be54718ed613cfc7811ffd341189087ca56c2c5c5ef6d12088d5f1313bd38a7dc2f8958213ed92a19daedc6e8d9055b762207cf44de451

  • SSDEEP

    98304:TRoeO6XTBJYazImknGzZr+HIPFtmOZ9G17xwFB5URUSKnaSOdroSCa:NoeO6XTYxmknGzwHIPHd9swFBubKT

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 864d8a990c01637ed695556de0d2c3ce41eab9f1c35f937a2c9b7337782f4239
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections