Overview

overview

10

Static

static

10

采集/DY�...��.exe

windows7-x64

10

采集/DY�...��.exe

windows10-2004-x64

10

采集/EThread.dll

windows7-x64

3

采集/EThread.dll

windows10-2004-x64

3

采集/dp1.dll

windows7-x64

3

采集/dp1.dll

windows10-2004-x64

3

采集/eAPI.dll

windows7-x64

3

采集/eAPI.dll

windows10-2004-x64

3

采集/eCalc.dll

windows7-x64

3

采集/eCalc.dll

windows10-2004-x64

3

采集/iext.dll

windows7-x64

3

采集/iext.dll

windows10-2004-x64

3

采集/internet.dll

windows7-x64

3

采集/internet.dll

windows10-2004-x64

3

采集/krnln.dll

windows7-x64

3

采集/krnln.dll

windows10-2004-x64

3

采集/libstl.dll

windows7-x64

3

采集/libstl.dll

windows10-2004-x64

3

采集/mp3.dll

windows7-x64

3

采集/mp3.dll

windows10-2004-x64

3

采集/spec.dll

windows7-x64

3

采集/spec.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e5c16ab45d74f4e8ee3dda3344a40295587e65d63a4d003c6fec0548d8b064f9

  • Size

    2.7MB

  • MD5

    25518b5ad8bbaa14b44525352e7081c5

  • SHA1

    86ccd7d3550d7d38a8eaf860afb75a7ff8615bdf

  • SHA256

    e5c16ab45d74f4e8ee3dda3344a40295587e65d63a4d003c6fec0548d8b064f9

  • SHA512

    e2df5063b8daf75fac69af3b070af8454880ec047aac15e5e0909e40ab9df4a5195fa179f2d6e208ccd76847b6a4959c6756b829f293ca9a52db12b21eccb30c

  • SSDEEP

    49152:xh60XnN9WCWuwyAZasMOqGGY7OeTnRoGYuM5waryAlGCCQv/gGHbfYuolxtIwxiN:xw03NoCrwdYsH7nnRnYuSw5AICB/THbR

Score
10/10
upxblackmoon

Malware Config

Signatures

  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

Files

  • e5c16ab45d74f4e8ee3dda3344a40295587e65d63a4d003c6fec0548d8b064f9
    .zip
  • 采集/DY评论采集.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 采集/EThread.fne
    .dll windows:4 windows x86 arch:x86

    63cbf8bd20c1290cfab1ed83b71ea939


    Headers

    Imports

    Exports

    Sections

  • 采集/Temp.dat
    .exe .js windows:4 windows x86 arch:x86 polyglot

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections

  • 采集/dp1.fne
    .dll windows:4 windows x86 arch:x86

    f4b4bca30df7e9c871bbc7c4aade35c8


    Headers

    Imports

    Exports

    Sections

  • 采集/eAPI.fne
    .dll windows:4 windows x86 arch:x86

    c0c83ce3c8933e771c5efabbc1925abb


    Headers

    Imports

    Exports

    Sections

  • 采集/eCalc.fne
    .dll windows:4 windows x86 arch:x86

    755c6d56ef7dd382a7f2b9c4f9106082


    Headers

    Imports

    Exports

    Sections

  • 采集/iext.fnr
    .dll windows:4 windows x86 arch:x86

    08cfcb998694241d9af66cc88c7cb611


    Headers

    Imports

    Exports

    Sections

  • 采集/internet.fne
    .dll windows:4 windows x86 arch:x86

    947a94c34d0476950a2cd72e8004382c


    Headers

    Imports

    Exports

    Sections

  • 采集/krnln.fnr
    .dll windows:4 windows x86 arch:x86

    c650685f8efeba03b654f256dca20dd7


    Headers

    Imports

    Exports

    Sections

  • 采集/libstl.fne
    .dll windows:6 windows x86 arch:x86

    4fbef41634dc23a221a1756924557025


    Headers

    Imports

    Exports

    Sections

  • 采集/mp3.run
    .dll windows:4 windows x86 arch:x86

    b6bf5d87f968f983290fecac8b99c4b3


    Headers

    Imports

    Exports

    Sections

  • 采集/spec.fne
    .dll windows:4 windows x86 arch:x86

    44912959aafe04feb6a5e77ff70ccd33


    Headers

    Imports

    Exports

    Sections