General
-
Target
ddc71e96a8aa5f9bcd2d73eba01b7573faa46a9ccc3c4cb90289fc006e9346beN.exe
-
Size
9.3MB
-
MD5
c65e01412858c22d393532d0395fbab0
-
SHA1
b491abf5b13c5c76b17be974058cbfce126fda64
-
SHA256
ddc71e96a8aa5f9bcd2d73eba01b7573faa46a9ccc3c4cb90289fc006e9346be
-
SHA512
10675ca4a9b09817790141743a1ec3f1987b88ae200c700573217245548dc34557aa8be0813887f681dc9c716c1aa3028e99a22933e32fff6045855c89ed92d4
-
SSDEEP
196608:K2c1uwl1CPwDv3uFhi43v13uFnCPws8S/VW08Sr8lQeY3YgOFmknGzwHIPHd9DPK:KnEwl1CPwDv3uFY43v13uFnCPwa/VW0E
Score
10/10
Malware Config
Signatures
-
Blackmoon family
-
Detect Blackmoon payload 1 IoCs
-
Mimikatz family
-
mimikatz is an open source tool to dump credentials on Windows 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
-
NSIS installer 1 IoCs
Files
-
ddc71e96a8aa5f9bcd2d73eba01b7573faa46a9ccc3c4cb90289fc006e9346beN.exe
Headers
Sections