blackmoon | aeb7d2929f2f9139886e3cff985b339e49c69789f4ab1fefc3522eb9d93dc954

General

Target

aeb7d2929f2f9139886e3cff985b339e49c69789f4ab1fefc3522eb9d93dc954
Size

64KB
MD5

e42bc99e2858cec2661fbd4effe5188e
SHA1

e0508cde09b1ff76d9d6bdca3f39772a43eba0f4
SHA256

aeb7d2929f2f9139886e3cff985b339e49c69789f4ab1fefc3522eb9d93dc954
SHA512

b383a84e6d1849f34507ec335c9599b40122b991271166d92110ec88810df643889e85027fe28c1c8ca487d37a7b960d22175fd70d96cacf7612dfa3aa5a82fe
SSDEEP

768:HOt7IRRSlEoZhwf/x0O+YoyQuDHT1PyWzougzRNlw:HOtMRRSioZhwnt+juDrr

Score

10^/10

upx blackmoon

Detect Blackmoon payload 1 IoCs

resource	yara_rule
sample	family_blackmoon

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aeb7d2929f2f9139886e3cff985b339e49c69789f4ab1fefc3522eb9d93dc954