blackmoon | b5dfd68d0085e04fa7f609b29f598fc7ea7ee7aa41a542f5195efc2c67038fe4[.]exe

General

Target

b5dfd68d0085e04fa7f609b29f598fc7ea7ee7aa41a542f5195efc2c67038fe4.exe
Size

3.8MB
MD5

55bce90441ab33f3a3614d09f6e5a817
SHA1

97bfca4cd7a9433de2dc0772d43c5912dc6f0ff0
SHA256

b5dfd68d0085e04fa7f609b29f598fc7ea7ee7aa41a542f5195efc2c67038fe4
SHA512

109b42317ac2ead586f00a40501933f70a5e025f5fc56c8a128871c623659dc3096a0196e7ac35bf19c27ecf8006207dbd46578607d10af196338c52c173aba9
SSDEEP

49152:SGCOfN6X5tLLQTg20ITS/PPs/1kS4eKRL/SRsj0Zuur1T75YqVUrmNF98jW:X6XLq/qPPslzKx/dJg1ErmNT

Score

10^/10

upx blackmoon njrat

Detect Blackmoon payload 1 IoCs

Processes:

resource	yara_rule
sample	family_blackmoon

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

Processes:

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
b5dfd68d0085e04fa7f609b29f598fc7ea7ee7aa41a542f5195efc2c67038fe4.exe