General

  • Target

    20240106c24fb37d301767ae752220e0c4547e7cbackswapicedid.exe

  • Size

    2.6MB

  • MD5

    c24fb37d301767ae752220e0c4547e7c

  • SHA1

    596bb0d145dac4aed0f6e1647707719562b9424c

  • SHA256

    c715d12c784ea4d060871930570bc12f42e078b681782c1d0a757829b2ebb6ee

  • SHA512

    b84e59914c21168686987d15ad059fb05005b09024bd839af6854655b5feab5b942bdb0c5fda6c2ff8cf3a934b258451c6b26716d24762d976f4386ffdbe39b3

  • SSDEEP

    24576:5nWYXDaHMv6CorjqnyPQGzh0JONZejOuC+e4mOzrvxiI3ENyesg/jHLxQVIxX6L7:tl1vqjdPQRw/D4mizA0dizLrB51v+

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 20240106c24fb37d301767ae752220e0c4547e7cbackswapicedid.exe
    .exe windows:4 windows x86 arch:x86

    9d5552b3a103c723c650b0d7a6310980


    Headers

    Imports

    Sections