General

  • Target

    38c4ab9087b1108d582789d22bb030c4832d5a08a0513381222eaf4270cf9918N.exe

  • Size

    2.8MB

  • MD5

    eca60170fa4fb7c4ceba3cd1889dc770

  • SHA1

    5e01caec92849f371aba5752b98855186b684fbc

  • SHA256

    38c4ab9087b1108d582789d22bb030c4832d5a08a0513381222eaf4270cf9918

  • SHA512

    1f51fadffdf2b46f845e5439be26811ca878c43d90a8789b02b3b7b81d85148032d7c513c4ea2ee8d317123c5b6b289635b5ac4187e838d6375eb7a0aa69b0bc

  • SSDEEP

    12288:fqGKl6bcNQSjEgkSiP8Lr2mFE66kjlKuJ9J7tfg+LRZq01Y:fNKl6b8JYgyP8WTGIuhZvPq

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 38c4ab9087b1108d582789d22bb030c4832d5a08a0513381222eaf4270cf9918N.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections