General

  • Target

    b5c6bbfe45592736796079727e670020d4fd9a7e84bb559162795bcb846190b9

  • Size

    857KB

  • MD5

    c4ba6d39ff429e66d50928ac792a89db

  • SHA1

    68bac1fd58ecd75f473b67e3a867f582162ff380

  • SHA256

    b5c6bbfe45592736796079727e670020d4fd9a7e84bb559162795bcb846190b9

  • SHA512

    9668057a2fffc9e33828f9a942f23481b088cbe16f85ddbc6e3edc601f317d435502c5eeee8b54413394260365e09c6de8235f0db2ffc1564d1c39a2b9dd9ef7

  • SSDEEP

    12288:322VtpTra84bb8k9+p+70LfmtJUeffD/5YITn1ELOa/uvXiUtU+0qsVf9T3j1hyF:m2fpgr4sKa5YCuaULVVf9j14g8F

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b5c6bbfe45592736796079727e670020d4fd9a7e84bb559162795bcb846190b9
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections