Overview

overview

10

Static

static

10

Steam˻....5.exe

windows7-x64

10

Steam˻....5.exe

windows10-2004-x64

10

Steam˻...ui.dll

windows7-x64

5

Steam˻...ui.dll

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    af415dadc52287ccbedbec287c081a665ddff2cbde6bc1e95da745ef087bedb1

  • Size

    379KB

  • MD5

    8f99d92b8c38060265c0715c5bc82515

  • SHA1

    b31d712432078557df6fb9078751929deab42e5b

  • SHA256

    af415dadc52287ccbedbec287c081a665ddff2cbde6bc1e95da745ef087bedb1

  • SHA512

    4cb27d0df2a87c1e5529eff58c968f47634cffc8abf017cc893a215b36b9a33313fcbbce528b0d56e942149ada6d71660c8abceb6c5314486b6545f181e9a43f

  • SSDEEP

    6144:ANF539O+XrUM2l0kaNzQeciH9vKSQqeW6qsZFBHKF8aY55OsuAbjl:AfHrDNMLW6/7HecuiJ

Score
10/10
upxblackmoon

Malware Config

Signatures

  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 1 IoCs
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • af415dadc52287ccbedbec287c081a665ddff2cbde6bc1e95da745ef087bedb1
    .zip
  • Steam˻л/Steam˻л V1.6.5.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Steam˻л/exdui.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections