General

  • Target

    96c7abf50740b2f824f7e738e67e7229d41bb70b74441c45176d1ebcfe14b7dc

  • Size

    971KB

  • MD5

    315e4c65148035b10f48a8b7d58c3212

  • SHA1

    3da3d472101feb2f5e934fd865a6dbc55584ca99

  • SHA256

    96c7abf50740b2f824f7e738e67e7229d41bb70b74441c45176d1ebcfe14b7dc

  • SHA512

    fd15cd2106f1cd10f87cefd7081f5f344acfbec75cf8656f838fd21fd2a0ce20575e67928d77d120209a9235bee11ae62e8f51ac3e5b20ab97e765d4dd9dc647

  • SSDEEP

    24576:oW+7EBtpeRwlEoRwODTIU0+kVm2VZQwy9E1Vf3M:v+Ij6wWoGODTPUVJ9y9EU

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 96c7abf50740b2f824f7e738e67e7229d41bb70b74441c45176d1ebcfe14b7dc
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections