Overview

overview

10

Static

static

10

61bf80cb8b...9N.exe

windows7-x64

10

61bf80cb8b...9N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    61bf80cb8beb60482b5a27ca37f8777f7bb8ca0e6c0bf2cf90a0f1e627acb1f9N

  • Size

    4.2MB

  • MD5

    bc5d833c71dc09b5caf6eaeedd309d50

  • SHA1

    3cd5a33c31905b3a5be185c346bfb839150e8e54

  • SHA256

    61bf80cb8beb60482b5a27ca37f8777f7bb8ca0e6c0bf2cf90a0f1e627acb1f9

  • SHA512

    50d0a424c81a8093f713da30f919a2f047b96ecbde588b4b1f49ce010c9bb978560f76e20c7a4332c3353d9180ddb76d2353b2c24c92e51aefeaf169405a9ebb

  • SSDEEP

    98304:Dg2KK3z9OP+9Rqc7nILa0az2jjSNLdDSznsO5fUTVf1+R3LzyZB:E2KKjQ+9RZ7nD23Sj4z5fURf8ZLzyZB

Score
10/10
upxisfbminergoziblackmoonxmrig

Malware Config

Extracted

Family

gozi

Signatures

  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 1 IoCs
  • Gozi family
    gozi
  • XMRig Miner payload 1 IoCs
    miner
  • Xmrig family
    xmrig
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 61bf80cb8beb60482b5a27ca37f8777f7bb8ca0e6c0bf2cf90a0f1e627acb1f9N
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections