blackmoon | b9ed559f917208221afe782e989cb378de8cef22a83338753a3fd949f354803a

General

Target

b9ed559f917208221afe782e989cb378de8cef22a83338753a3fd949f354803a
Size

2.1MB
MD5

16ab871e0952598f3f1568904a63554b
SHA1

3bc709c6dd7b18ffeabc2fb7921f9282949b13fa
SHA256

b9ed559f917208221afe782e989cb378de8cef22a83338753a3fd949f354803a
SHA512

25d73140935d08dc33fbcc534867a23ac5229be2db2f50c935185d65ab5d4aa436df142d36878661acb9d67671b6069ba1930fb0b8ed71826e558c99688cef32
SSDEEP

24576:3qzIIUgC8d36kLBXlnB8j7v5Ta+hLLQ20JmXSeWwa1oWJQjk0svTS/PPsbb1hwRM:3sCOfN6X5tLLQTg20ITS/PPs/1kM

Score

10^/10

upx blackmoon njrat

Detect Blackmoon payload 1 IoCs

Processes:

resource	yara_rule
sample	family_blackmoon

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

Processes:

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
b9ed559f917208221afe782e989cb378de8cef22a83338753a3fd949f354803a