blackmoon | 3ac9df21dbbfa0393f84867ee92aa74aa4b886de6fc08e4b251e91148dfb673f[.]exe

General

Target

3ac9df21dbbfa0393f84867ee92aa74aa4b886de6fc08e4b251e91148dfb673f.exe
Size

9.3MB
MD5

1c73244737b508707c2628b8c9a56786
SHA1

d8e5970bb842fdbd74ab921f218aa9818f4f4063
SHA256

3ac9df21dbbfa0393f84867ee92aa74aa4b886de6fc08e4b251e91148dfb673f
SHA512

129e685cada5bb09774adc9e17c046b3fb9f6fcec10f6e2b5f3572d1105396d512879bb755e317cd49d12f27cdb7a94aa1f27c31e79384be9f359e8c4808d7d6
SSDEEP

196608:K2c1uwl1CPwDv3uFhi43v13uFnCPws8S/VW08Sr8lQeY3YgOFmknGzwHIPHd9DP0:KnEwl1CPwDv3uFY43v13uFnCPwa/VW0c

Score

10^/10

Detect Blackmoon payload 1 IoCs

resource	yara_rule
sample	family_blackmoon

mimikatz is an open source tool to dump credentials on Windows 1 IoCs

resource	yara_rule
sample	mimikatz

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ac9df21dbbfa0393f84867ee92aa74aa4b886de6fc08e4b251e91148dfb673f.exe

NSIS installer 1 IoCs

installer

resource	yara_rule
sample	nsis_installer_2