General

  • Target

    a18764e20c4eb44612d0f9bbca1850cc77080e963accc79b2332fda9d28cafedN.exe

  • Size

    3.8MB

  • MD5

    787a9834382da76353da50d1f3457a20

  • SHA1

    efac79372ddce4fd32330755c832bc350a9474f3

  • SHA256

    a18764e20c4eb44612d0f9bbca1850cc77080e963accc79b2332fda9d28cafed

  • SHA512

    f08f7b4424740b74bdde00a4ff963e02a8c65ddfaee03dcb0c18737fa79fcc5a388024c6df956cbd18033b4dac99a79aed7c0588adafb65e72467d12adf058b1

  • SSDEEP

    49152:SGCOfN6X5tLLQTg20ITS/PPs/1kS4eKRL/SRsj0Zuur1T75YqVUrmNF98jm:X6XLq/qPPslzKx/dJg1ErmNL

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Njrat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a18764e20c4eb44612d0f9bbca1850cc77080e963accc79b2332fda9d28cafedN.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections