General

  • Target

    2db7ee094275a06c27bac622f43d0dae_backswap_icedid_JC.exe

  • Size

    2.6MB

  • MD5

    2db7ee094275a06c27bac622f43d0dae

  • SHA1

    5bc85cb0b99c041a71eb641483d994c860fa8969

  • SHA256

    e2c89fa36eeb187b90539ffd75d17427556a748cddb10a60cbaaf8909ffc7973

  • SHA512

    bfe97dee95482b2fea8211e8e81e2e555f2ac173d66088f604f5b51c3b63e3cb346bf447840f9371c64e09816896d63c8c58f518245bccb9457d20eccac79371

  • SSDEEP

    24576:5nWYXDaHMv6CorjqnyPQGzh0JONZejOuC+e4mOzrvxiI3ENyesg/jHLxQVIxX6La:tl1vqjdPQRw/D4mizA0dizLrB51vj

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2db7ee094275a06c27bac622f43d0dae_backswap_icedid_JC.exe
    .exe windows x86

    9d5552b3a103c723c650b0d7a6310980


    Headers

    Imports

    Sections