General

  • Target

    NEAS.2023-09-08_2f3c0ae5ce12b7caf9b41f61e5c83050_backswap_icedid_JC.exe

  • Size

    2.6MB

  • MD5

    2f3c0ae5ce12b7caf9b41f61e5c83050

  • SHA1

    a32036f048d1fc3cbb6f0bda554f70012d43ec93

  • SHA256

    7d91fb3786b64699ad763c288b8bcd0c1dce64a0f1c7fb95f3bd0850f458ae25

  • SHA512

    f72765ee742e403ae59a6dd84bd023d9273b94c9905e0cd07e4056a7e06a2b09bd70e6d3e7243543452f68b38bd3799c356fbb1be2c547feeab67b3cba383aec

  • SSDEEP

    24576:5nWYXDaHMv6CorjqnyPQGzh0JONZejOuC+e4mOzrvxiI3ENyesg/jHLxQVIxX6LR:tl1vqjdPQRw/D4mizA0dizLrB51vc

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.2023-09-08_2f3c0ae5ce12b7caf9b41f61e5c83050_backswap_icedid_JC.exe
    .exe windows:4 windows x86

    9d5552b3a103c723c650b0d7a6310980


    Headers

    Imports

    Sections