General

  • Target

    4f8ad08ebce9783e772d3456f6f5a9066f2b11d2de977184e9e5c8dbe5832034

  • Size

    6.3MB

  • MD5

    da1c1e77aaa6c692b84704041db369b1

  • SHA1

    44b4ddb7eda059689b50bc0c153d50738613359d

  • SHA256

    4f8ad08ebce9783e772d3456f6f5a9066f2b11d2de977184e9e5c8dbe5832034

  • SHA512

    36e404ab94165a3fdcad3a336fb9c1db4b3edfc3dcf7ab6b9889ce930806878ffedb23f7608e16156f9b4593f94b2976a746f689f4bde45f3f961e9a5d43d866

  • SSDEEP

    98304:IaAXTBJYaEmknGzZr+HaOKSVPFtmOZ9G1j5v/nZVnivsAl0oroSCa:IpXTYFmknGzwHaOtVPHd90X/nivPlS

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 4f8ad08ebce9783e772d3456f6f5a9066f2b11d2de977184e9e5c8dbe5832034
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections