General

  • Target

    36c12d9ec61262e8cc890397848c3567d24176f776576eb177d599460ae78e59N

  • Size

    7.6MB

  • MD5

    c5b26199441c2132f17995a1b481a890

  • SHA1

    a1873326a6a27da824d3477728f06e8a07792dfd

  • SHA256

    36c12d9ec61262e8cc890397848c3567d24176f776576eb177d599460ae78e59

  • SHA512

    85c65baf9c443727039f9b1b53373d69d472393acca5e43b29ea049c4cdd8e5e333c9fb743e0e406c01c3c6f07c52ebe19d7f0db92302e8e454dfd37d1fb48d4

  • SSDEEP

    196608:q/1ojpP28lWMXnsphKJZsrgHI/q+vV9I0qZjBFEk:5p1actf

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 36c12d9ec61262e8cc890397848c3567d24176f776576eb177d599460ae78e59N
    .dll windows:4 windows x86 arch:x86

    08b5499e66e5196b0b5da399184fb0e0


    Headers

    Imports

    Exports

    Sections