Overview

overview

10

Static

static

10

2024-01-09...id.exe

windows7-x64

7

2024-01-09...id.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-09_d11d67378d5113cd2045fee05ed7d073_backswap_icedid

  • Size

    2.6MB

  • MD5

    d11d67378d5113cd2045fee05ed7d073

  • SHA1

    9065f682b3221d605ccdf423fcd50e079998cc01

  • SHA256

    b82b5fd2245f78e0f4e2d1cda4681451568ab50ddb8f49780a3ee1b8bbcbc903

  • SHA512

    4d705edadeeae3f86f4fac15b91df4111b21f1e907d60bb8405dab9d37e0b9b400acb2951e2edb13ec85e03dcf9edd05ad777beb07b08227054b58db8700f8b9

  • SSDEEP

    24576:5nWYXDaHMv6CorjqnyPQGzh0JONZejOuC+e4mOzrvxiI3ENyesg/jHLxQVIxX6LH:tl1vqjdPQRw/D4mizA0dizLrB51vm

Score
10/10
blackmoon

Malware Config

Signatures

  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 1 IoCs
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-09_d11d67378d5113cd2045fee05ed7d073_backswap_icedid
    .exe windows:4 windows x86 arch:x86

    9d5552b3a103c723c650b0d7a6310980


    Headers

    Imports

    Sections