General

  • Target

    1e734a02e374ae3fbd76679366729b63f8c6ccd09ce0ed772038f1cbf6a1d483

  • Size

    9.3MB

  • MD5

    64b262f7f226c7b461a6a0d753f66345

  • SHA1

    44824e4a6124d31f8ab5e623fc00776d250b71cb

  • SHA256

    1e734a02e374ae3fbd76679366729b63f8c6ccd09ce0ed772038f1cbf6a1d483

  • SHA512

    3c379678ae3f2d9221097d7c82091fae46922ef27ca874249b235fc480a023ee985d7044d2fc54635415b13ff5e3c421dbf397a6dd797b0e0661bd21ac989ccd

  • SSDEEP

    98304:TRoeO6XTBJYazImknGzZr+HIPFtmOZ9G17xwFB5URUSKnaSOdroSCa:NoeO6XTYxmknGzwHIPHd9swFBubKT

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Mimikatz family
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • 1e734a02e374ae3fbd76679366729b63f8c6ccd09ce0ed772038f1cbf6a1d483
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections