Overview

overview

10

Static

static

10

da5c8e2a6a...90.dll

windows7-x64

10

da5c8e2a6a...90.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    da5c8e2a6a584a9d2c0b099afc00883efb8b8e01200ce5c908d5e043fc123390

  • Size

    489KB

  • MD5

    67d60e0aee9c1474183263ce0a01bdd3

  • SHA1

    d3c8d04c8fe4b47bfe122e65e7a09f06f5680e1a

  • SHA256

    da5c8e2a6a584a9d2c0b099afc00883efb8b8e01200ce5c908d5e043fc123390

  • SHA512

    a6b782294ce39ee535e12067d0e86cc8665b362c4cf55634f7676f6a9b10cb825f802ba6e4eec650968e59af97daf203055a45deeefa4c5828f2fc2d3f09e503

  • SSDEEP

    12288:l3QlApDDW2627wXxJpy+612BI3XZcK5FuIzNp3eYXq4TpOgfpGfq:NQl2HWAwxcM4u9IzNxjhBGq

Score
10/10
upxblackmoon

Malware Config

Signatures

  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 1 IoCs
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • da5c8e2a6a584a9d2c0b099afc00883efb8b8e01200ce5c908d5e043fc123390
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections