General

  • Target

    NEAS.2023-09-08_0eebe82251ac871edb7359df48f25633_backswap_icedid_JC.exe

  • Size

    2.6MB

  • MD5

    0eebe82251ac871edb7359df48f25633

  • SHA1

    b9191bfdc15b2545844ea5fd79f933e47041999c

  • SHA256

    93267801bb257745539a09e2392f010760308e17708cb2d29a43d583105a1747

  • SHA512

    02e5ec4d76424acdeeeaada094706cf61986e84dcd771a6dc15cb332a6521b5b2efcaa8d6c56aaa9b7b89c63aa0711aa2fc81d4d6f79246a11e49ef45f4093f7

  • SSDEEP

    24576:5nWYXDaHMv6CorjqnyPQGzh0JONZejOuC+e4mOzrvxiI3ENyesg/jHLxQVIxX6Lk:tl1vqjdPQRw/D4mizA0dizLrB51vV

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.2023-09-08_0eebe82251ac871edb7359df48f25633_backswap_icedid_JC.exe
    .exe windows:4 windows x86

    9d5552b3a103c723c650b0d7a6310980


    Headers

    Imports

    Sections