blackmoon | 171f86d7a6ecd09bef74f29d53d9d06a778248849c8517b370d9d42b9b9987f5N[.]exe

General

Target

171f86d7a6ecd09bef74f29d53d9d06a778248849c8517b370d9d42b9b9987f5N.exe
Size

3.8MB
MD5

d0591eb5d21b597c73da19e3894571c0
SHA1

3bd9c30e8f12cb797ca3e5246bb811f63bd8df60
SHA256

171f86d7a6ecd09bef74f29d53d9d06a778248849c8517b370d9d42b9b9987f5
SHA512

6eaf26cc213439d14450ffce46a37fee0ef0b21cdf7902bae5be8c903d10cbf685e8e3f19d992951abca90b0373efdae4967c666030b262251048fd9c81856e1
SSDEEP

49152:3sCOfN6X5tLLQTg20ITS/PPs/1kS4eKRL/SRsj0Zuur1T75YqVUrmNF98ij:Q6XLq/qPPslzKx/dJg1ErmNd

Score

10^/10

upx blackmoon njrat

Detect Blackmoon payload 1 IoCs

Processes:

resource	yara_rule
sample	family_blackmoon

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

Processes:

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
171f86d7a6ecd09bef74f29d53d9d06a778248849c8517b370d9d42b9b9987f5N.exe