General

  • Target

    974a422209b1ce61eac012d5a61db259_backswap_icedid_JC.exe

  • Size

    2.6MB

  • MD5

    974a422209b1ce61eac012d5a61db259

  • SHA1

    de836c85a67c4783c9b14e71594c4412d51d50d0

  • SHA256

    67a8795cb9e1559f3685f5f0be417d5c03c5bc93a3a95738d0338945f4e04b3c

  • SHA512

    b418e0fe94d23daf2d9f640144f1b7754c114abf62d6e79557cc30e17fddec70caa101677e3f465b038187bd7df9846c29df99e6b435fe7e2e02e580a2630ce4

  • SSDEEP

    24576:5nWYXDaHMv6CorjqnyPQGzh0JONZejOuC+e4mOzrvxiI3ENyesg/jHLxQVIxX6LV:tl1vqjdPQRw/D4mizA0dizLrB51vM

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 974a422209b1ce61eac012d5a61db259_backswap_icedid_JC.exe
    .exe windows x86

    9d5552b3a103c723c650b0d7a6310980


    Headers

    Imports

    Sections