General

  • Target

    6a29fbf31c6028773ee2656664efa08280345ba6f51755b7e5739cf4c78f22a3

  • Size

    2.0MB

  • MD5

    db86ecc38e0e3d86821c7566d1cee654

  • SHA1

    28b2a884029ee8c2b130be5026c1ad403baba8cc

  • SHA256

    6a29fbf31c6028773ee2656664efa08280345ba6f51755b7e5739cf4c78f22a3

  • SHA512

    fb7a31f031a04a4a9301c024101ab3d91a4c559a989d5081867076a24463678b4ffc2ebc099303901562ba4a3643826201c30458017c6e1dc23cbcc8fb4f5638

  • SSDEEP

    49152:bjG91FcHhQAk2aFZF4r5fvEMgjYO8UbmhcM+Eb:b6FiqXKrJEMq8UFZ2

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6a29fbf31c6028773ee2656664efa08280345ba6f51755b7e5739cf4c78f22a3
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections