blackmoon | f37d9f34f4247d7d47dcc690ab2da3983be5c7e7814aa9d98fda637f7984586b[.]exe

General

Target

f37d9f34f4247d7d47dcc690ab2da3983be5c7e7814aa9d98fda637f7984586b.exe
Size

5.1MB
MD5

ce69253483584dce46c4bda872bb579d
SHA1

bfe495ed5df21a726810fddb84a731db8a7b0312
SHA256

f37d9f34f4247d7d47dcc690ab2da3983be5c7e7814aa9d98fda637f7984586b
SHA512

6e4a0c64409894bd730cd594764e6d45b543d64f8fbc34aa6bcb0c5fd6b0a939bdbd5815d498538e203f9a3ce06498a8878a918589cc61841742304f09a5fccd
SSDEEP

98304:mfgwpJXZdLmpdT2pVWLncQC0ofccWg1uMb3XmcTYmRKlUfgwpJXZdLmpdT2pVWLh:6HpzdwIWLYc41uaTZ5HpzdwIWLYc41uB

Score

10^/10

upx blackmoon

Detect Blackmoon payload 1 IoCs

Processes:

resource	yara_rule
static1/unpack001/out.upx	family_blackmoon

UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

Processes:

resource
f37d9f34f4247d7d47dcc690ab2da3983be5c7e7814aa9d98fda637f7984586b.exe
unpack001/out.upx