General

  • Target

    c6e8b37ac9ae05578103bfc59f53e1e3da24458c32ba9fcd2a4ed8d8235e8c08N

  • Size

    10.0MB

  • MD5

    746ec977b1454b81f8d3c3c91755c5a0

  • SHA1

    0e54227c19f0bf2be9750059fe431b9ff2498d91

  • SHA256

    c6e8b37ac9ae05578103bfc59f53e1e3da24458c32ba9fcd2a4ed8d8235e8c08

  • SHA512

    6bff6e2f6e86c1d308751adbdf6388dd61b0464bd293005436e78eaedf025cc07cb8f8d5cb35e492508a7f3f0e142bdd53f643a77588d6d313cd85d13c646ede

  • SSDEEP

    98304:TRoeO6XTBJYazImknGzZr+HIPFtmOZ9G17xwFB5URUSKnaSOdroSCa:NoeO6XTYxmknGzwHIPHd9swFBubKT

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • c6e8b37ac9ae05578103bfc59f53e1e3da24458c32ba9fcd2a4ed8d8235e8c08N
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections