Overview

overview

10

Static

static

10

cs2（解�...��.exe

windows7-x64

10

cs2（解�...��.exe

windows10-2004-x64

10

cs2（解�...��.bat

windows7-x64

7

cs2（解�...��.bat

windows10-2004-x64

7

cs2（解�...��.lnk

windows7-x64

3

cs2（解�...��.lnk

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    425f015232a22e4449925637e16ef612995d44cad31d4884f2d2d64c6c610a71

  • Size

    15.6MB

  • MD5

    b236016daf53914cf3b8ab92cc7a2d26

  • SHA1

    bc8af2e3abd60733d93fee32bd53df355c7d24d9

  • SHA256

    425f015232a22e4449925637e16ef612995d44cad31d4884f2d2d64c6c610a71

  • SHA512

    60cbc75e6314519ccc862764bacf3fa3b0f9b4781198f63222b494321787796356cd94336a9c64f48a4de9e31e41d2e7959e310c52dcf3ca0c9bb6008233fdee

  • SSDEEP

    393216:dN94EyVLJ2ucvfBr28mlgKsgv5fqn6N/VbxLA8Mt:dn4Ea2zvJKwDU/VLAXt

Score
10/10
blackmoon

Malware Config

Signatures

  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 425f015232a22e4449925637e16ef612995d44cad31d4884f2d2d64c6c610a71
    .zip
  • cs2（解压我出来）/1.使用前必读.txt
  • cs2（解压我出来）/2.辅助.exe
    .exe windows:5 windows x86 arch:x86

    914551c8bfce1a54954bc60d36106e3a


    Headers

    Imports

    Sections

  • cs2（解压我出来）/3.自瞄介绍.jpg
    .jpg
  • cs2（解压我出来）/4.乱码根据我设置.txt
  • cs2（解压我出来）/5.清理运行痕迹.bat
  • cs2（解压我出来）/数据执行保护.lnk
    .lnk