General

  • Target

    dbe3fe376aebd683e2d2a1898b2b8f18a6265ca8050b6a6b8b862c44949a8b44N

  • Size

    9.0MB

  • MD5

    c52eb7d2abfe721f2e914d2ab18b3110

  • SHA1

    4edd1c1025abc7bde37a150d3198f4f32c7d9dab

  • SHA256

    dbe3fe376aebd683e2d2a1898b2b8f18a6265ca8050b6a6b8b862c44949a8b44

  • SHA512

    a4df8aa08702f55dafe5bf5ac5b0870ba2e2bd40041de5b05cd4371485d56a6dbea43aac9ca9cb8fe1a01e71db6be736a9439020975cb262da46ac1cdfb24bcb

  • SSDEEP

    98304:TRoeO6XTBJYazImknGzZr+HIPFtmOZ9G17xwFB5URUSKnaSOdroSCa:NoeO6XTYxmknGzwHIPHd9swFBubKT

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • dbe3fe376aebd683e2d2a1898b2b8f18a6265ca8050b6a6b8b862c44949a8b44N
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections