General

  • Target

    2ebbc9a551e09174fbf4f828ca1415a15f417de7c164f17778b7ec853d97f861N

  • Size

    9.6MB

  • MD5

    89ad030b9729bca199ee3065e96e60e0

  • SHA1

    2f6c0dd895219348153999d95689ba1ee26a69fe

  • SHA256

    2ebbc9a551e09174fbf4f828ca1415a15f417de7c164f17778b7ec853d97f861

  • SHA512

    19bf12a9a1b63096bbd5f7e28b7246f9d406174bb11e9422adc0e98ebd9c178c3bbadff4f5f11009c3f9119296f8cf7aaa800f4a6f35aa2b861c0e0516905cce

  • SSDEEP

    98304:TRoeO6XTBJYazImknGzZr+HIPFtmOZ9G17xwFB5URUSKnaSOdroSCa:NoeO6XTYxmknGzwHIPHd9swFBubKT

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 2ebbc9a551e09174fbf4f828ca1415a15f417de7c164f17778b7ec853d97f861N
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections