General

  • Target

    5f1d8ffded9f0b29c9a0db979afb115cb46635a0554d00388de962e4fff140a9

  • Size

    9.8MB

  • MD5

    0637780b1f904640c10ebe9b0bf69adc

  • SHA1

    396d66088d83f3638c7f6a84def0683becea2246

  • SHA256

    5f1d8ffded9f0b29c9a0db979afb115cb46635a0554d00388de962e4fff140a9

  • SHA512

    30f80d5bac99913bc4bb9c00b89997db22ae0f056abc55e4b4ed62ca048696a7cc71bcfa68a2c5faeb999f34fdf627b67cdeb6827c53040f5c212d95e5319927

  • SSDEEP

    98304:TRoeO6XTBJYazImknGzZr+HIPFtmOZ9G17xwFB5URUSKnaSOdroSCa:NoeO6XTYxmknGzwHIPHd9swFBubKT

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 5f1d8ffded9f0b29c9a0db979afb115cb46635a0554d00388de962e4fff140a9
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections