Overview

overview

10

Static

static

10

614f4d81fd...JC.exe

windows7-x64

7

614f4d81fd...JC.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    614f4d81fd12de56aa2cfdd69d91a890_backswap_icedid_JC.exe

  • Size

    2.6MB

  • MD5

    614f4d81fd12de56aa2cfdd69d91a890

  • SHA1

    753afb0840bec451b5cab7605854d6cdbd1a67fe

  • SHA256

    8a173803c04a9cb0985c837ebfd8f280b7d85afcf639f545275565674ced2ff9

  • SHA512

    170c048e2ba41bdd1d28e9d8915c277d5305295f38cfab38f4a0138e2fe65320549479b54f8ac4ca2b4fa6ea3365f2a7ce506ac5a0025d0d821efcd3a0b9565f

  • SSDEEP

    24576:5nWYXDaHMv6CorjqnyPQGzh0JONZejOuC+e4mOzrvxiI3ENyesg/jHLxQVIxX6LE:tl1vqjdPQRw/D4mizA0dizLrB51vR

Score
10/10
blackmoon

Malware Config

Signatures

  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 1 IoCs
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 614f4d81fd12de56aa2cfdd69d91a890_backswap_icedid_JC.exe
    .exe windows x86

    9d5552b3a103c723c650b0d7a6310980


    Headers

    Imports

    Sections