General

  • Target

    c90245cef8775f6deb3d23d4423e1eaf1a5b7ab2edfb7a72455144abfffa68c0N

  • Size

    10.0MB

  • MD5

    b17dc8279255fdb23e1892d66fa0ee90

  • SHA1

    d81c2e25790292ff29361feb37e1246917afa6ad

  • SHA256

    c90245cef8775f6deb3d23d4423e1eaf1a5b7ab2edfb7a72455144abfffa68c0

  • SHA512

    2e7563255059f5ef34c63ebf550ff4721bf7858ba07ed6a2886169c8c1f84bdf03d79a19afadba487f94f640fc3417100c21fa80fde486feb192ce679ec883eb

  • SSDEEP

    98304:TRoeO6XTBJYazImknGzZr+HIPFtmOZ9G17xwFB5URUSKnaSOdroSCa:NoeO6XTYxmknGzwHIPHd9swFBubKT

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • c90245cef8775f6deb3d23d4423e1eaf1a5b7ab2edfb7a72455144abfffa68c0N
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections