General

  • Target

    2f0977e7104aef6673cdc648324ad5af5a2182dda0312cf23cc7b57b947982ce

  • Size

    1.0MB

  • MD5

    b9ed800a8bf4094193de649a92f30c60

  • SHA1

    a7614cd015d4db46ac230fc806a9312e2166c238

  • SHA256

    2f0977e7104aef6673cdc648324ad5af5a2182dda0312cf23cc7b57b947982ce

  • SHA512

    8026ec7454e31081fabe50363d31058f9ffe6ace83a08ab7679178b62b8d6bdb47b4f41ffff8ae2c63ddec2002b8f6a58dd616aa5dc2a8146f2298677249420b

  • SSDEEP

    24576:lYFyT/tusRjbjVWaayki90wEm1GBREG6P64/Z4EaPBw1CO:lYFMtusRjbjgalki90wEmI7GS4/uBw1C

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2f0977e7104aef6673cdc648324ad5af5a2182dda0312cf23cc7b57b947982ce
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections