General

  • Target

    244bd32ae44d01e1a9b39e0dec49af8837aecaf062eaab8bd34ce37a2c47c7af.exe

  • Size

    2.9MB

  • MD5

    2daf6d725e3aecf2630c173dce1d6128

  • SHA1

    8bd07dfe0e5f15459ac9d9560d274c04d2ea69e3

  • SHA256

    244bd32ae44d01e1a9b39e0dec49af8837aecaf062eaab8bd34ce37a2c47c7af

  • SHA512

    84335cf40ab3257390b99056a6846acb419692d0cbedc3f862c501348d09367c02896825c45d6a651894e8a27c5bfd83c58c921587ed838b9d56ced86168f52d

  • SSDEEP

    12288:fqGKl6bcNQSjEgkSiP8Lr2mFE66kjlKuJ9J7tfg+LRZq01Y4:fNKl6b8JYgyP8WTGIuhZvPqA

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 244bd32ae44d01e1a9b39e0dec49af8837aecaf062eaab8bd34ce37a2c47c7af.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections