General

  • Target

    5da0e5ca58579f0a9bcec947e2af5335036c55835ad0b9758f6a1dc8c6e569f7N

  • Size

    9.6MB

  • MD5

    76b8f9764f947289994ed26b99549a50

  • SHA1

    1a7e757517a719c7c01464d2e998c4b1ead98f6e

  • SHA256

    5da0e5ca58579f0a9bcec947e2af5335036c55835ad0b9758f6a1dc8c6e569f7

  • SHA512

    818aae870bdb24a43147042917ebf3ccebd7c806a17fb03e08483c87fba981e58f09bdbcbd9fd11ac2d402c389a51df6655503c400c2bf039069fc5ee9d3f8c5

  • SSDEEP

    98304:TRoeO6XTBJYazImknGzZr+HIPFtmOZ9G17xwFB5URUSKnaSOdroSCa:NoeO6XTYxmknGzwHIPHd9swFBubKT

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 5da0e5ca58579f0a9bcec947e2af5335036c55835ad0b9758f6a1dc8c6e569f7N
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections