blackmoon | ef1050c92d8b2053fc88be90d527a7fb73e76a32b16cbdd8dcb2f429b6c4f037[.]exe

General

Target

ef1050c92d8b2053fc88be90d527a7fb73e76a32b16cbdd8dcb2f429b6c4f037.exe
Size

5.0MB
MD5

f45ef44f86e756b76afe151ef9c630f4
SHA1

de16feb362b62382590e21f723dba440721f4e6f
SHA256

ef1050c92d8b2053fc88be90d527a7fb73e76a32b16cbdd8dcb2f429b6c4f037
SHA512

773e1202d6164489096fec60f7e0d1b88fff8bcadc12df6a7011b896dffd43c2ffd2b5e377697ecab2fd52f978cc84fd950d76ff41bc797062833b7b3bbe2be0
SSDEEP

98304:mfgwpJXZdLmpdT2pVWLncQC0ofccWg1uMb3XmcTYmRKl8fgwpJXZdLmpdT2pVWLj:6HpzdwIWLYc41uaTZZHpzdwIWLYc41uD

Score

10^/10

upx blackmoon

Detect Blackmoon payload 1 IoCs

Processes:

resource	yara_rule
static1/unpack001/out.upx	family_blackmoon

UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

Processes:

resource
ef1050c92d8b2053fc88be90d527a7fb73e76a32b16cbdd8dcb2f429b6c4f037.exe
unpack001/out.upx