General

  • Target

    6d14c741f412938760c594300e845272648bc0f92a1f69145ee2dcc7d7efcbf3

  • Size

    235KB

  • MD5

    de6b64eb7470044aebc250931a367747

  • SHA1

    a85ae5ea92e0116153e794412aadf726c260e31c

  • SHA256

    6d14c741f412938760c594300e845272648bc0f92a1f69145ee2dcc7d7efcbf3

  • SHA512

    5b9f50f878fe83363f63a2c0427dbdaf209465723c2a6a86c4b18f1c331cc17a00c33d0796d53ff16c8fb8d090d654a91dd662b702f09cf21cd16cbd35077e11

  • SSDEEP

    6144:vpLgHDEpTdnKUIgAXGHxh9o9eolxYusR6Py99Bq4z6k:5nTKUJA2HxfoMusR6aZq9

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6d14c741f412938760c594300e845272648bc0f92a1f69145ee2dcc7d7efcbf3
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections