General

  • Target

    18b9cf6a369a93d5e56df3c42bf51cc743024b547d55868e21b5bfbe79e548edN

  • Size

    9.6MB

  • MD5

    ad2540dfc8a1413c36b8ccead5d20290

  • SHA1

    f9548d286b3aa095d3a9460d9bb2117f88f11193

  • SHA256

    18b9cf6a369a93d5e56df3c42bf51cc743024b547d55868e21b5bfbe79e548ed

  • SHA512

    8cf515a3fe2835bb546ee9c22f6cc27be13da87aeb0e951a034bf3acc64b4cc20e912bc3fedff210c7f6c2fc6928d59cd29985039ebaf1ff3228677f0cbe0c5a

  • SSDEEP

    98304:TRoeO6XTBJYazImknGzZr+HIPFtmOZ9G17xwFB5URUSKnaSOdroSCa:NoeO6XTYxmknGzwHIPHd9swFBubKT

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 18b9cf6a369a93d5e56df3c42bf51cc743024b547d55868e21b5bfbe79e548edN
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections