General

  • Target

    72242a2ceac1573f23a34cb4e0cd6d69_backswap_icedid_JC.exe

  • Size

    2.6MB

  • MD5

    72242a2ceac1573f23a34cb4e0cd6d69

  • SHA1

    137dec2d6b87a76affd3e7a359d37bd191f63d81

  • SHA256

    61b5303feb469223d5a3891c190e9b0e49786cc59408074e8f5e0ea6101ba257

  • SHA512

    da8117ca7e9290af8f177e126ff8a6b802d4ba65e110533ee6a084a962cc3c182deb8b10b34b06743ef1b685d75f2d368d3f63a2aa8e533b4478d92bfbccb46a

  • SSDEEP

    24576:5nWYXDaHMv6CorjqnyPQGzh0JONZejOuC+e4mOzrvxiI3ENyesg/jHLxQVIxX6LP:tl1vqjdPQRw/D4mizA0dizLrB51vG

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 72242a2ceac1573f23a34cb4e0cd6d69_backswap_icedid_JC.exe
    .exe windows x86

    9d5552b3a103c723c650b0d7a6310980


    Headers

    Imports

    Sections