Overview

overview

10

Static

static

10

41af74f57f...JC.exe

windows7-x64

7

41af74f57f...JC.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    41af74f57fe1fbcfef1c9e0481534740_backswap_icedid_JC.exe

  • Size

    2.6MB

  • MD5

    41af74f57fe1fbcfef1c9e0481534740

  • SHA1

    808acc018dbc6f9fdc747fc2e7c76bd79ec812c4

  • SHA256

    6f2b18c32767650c527cf33af7b29e2fa24404f878d8e6faf247579bd9dcd462

  • SHA512

    2c9aeb48ff1f263256ee8f2cdf93f67484963f52a4cae78983b836441ec859ea4840158ddc08ad47f607c361648b06583b828256774272f16ac65c58f13d27c0

  • SSDEEP

    24576:5nWYXDaHMv6CorjqnyPQGzh0JONZejOuC+e4mOzrvxiI3ENyesg/jHLxQVIxX6L5:tl1vqjdPQRw/D4mizA0dizLrB51v0

Score
10/10
blackmoon

Malware Config

Signatures

  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 1 IoCs
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 41af74f57fe1fbcfef1c9e0481534740_backswap_icedid_JC.exe
    .exe windows x86

    9d5552b3a103c723c650b0d7a6310980


    Headers

    Imports

    Sections