General

  • Target

    247ac4a49e8e5e42365e8abfd7f13e2a7771d2e6692273516e7debd96de5bdd6

  • Size

    857KB

  • MD5

    b1a1ab076c518eccb12f12f2aa6ccd32

  • SHA1

    fc07f5058f5e4ee575ee06d30e29181f42b622f5

  • SHA256

    247ac4a49e8e5e42365e8abfd7f13e2a7771d2e6692273516e7debd96de5bdd6

  • SHA512

    6888185fa78fa4fd0675d168c2773854b5e5cd5b03730cad99c4190d3dc9f3d26639c7c83c549d3ed0cd07d75c8b7905d1d7bae4c0d492957913e13f06f0bb0f

  • SSDEEP

    12288:322VtpTra84bb8k9+p+70LfmtJUeffD/5YITn1ELOa/uvXiUtU+0qsVf9T3j1hyQ:m2fpgr4sKa5YCuaULVVf9j14g8Q

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 247ac4a49e8e5e42365e8abfd7f13e2a7771d2e6692273516e7debd96de5bdd6
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections