Overview

overview

10

Static

static

10

2024-02-01...id.exe

windows7-x64

7

2024-02-01...id.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-01_7b87960278ef6fedb65476d42fec0c14_backswap_icedid

  • Size

    2.6MB

  • MD5

    7b87960278ef6fedb65476d42fec0c14

  • SHA1

    ac99f4053efcc825dcf97592bc6aaf818472f094

  • SHA256

    fdbc84831bc8d39ce129325aa535ee2808e8b88a0bce27614c682d394fc8022f

  • SHA512

    9fb89f66cefef07e4ed1a25b05a885b5f62c0d3bbff9e2dcc19e9fd14251b58dc61fe559287c7cd559f8364b42e6921e99b50d18887fe061cb933f153ebfa8cf

  • SSDEEP

    24576:5nWYXDaHMv6CorjqnyPQGzh0JONZejOuC+e4mOzrvxiI3ENyesg/jHLxQVIxX6Lk:tl1vqjdPQRw/D4mizA0dizLrB51vt

Score
10/10
blackmoon

Malware Config

Signatures

  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 1 IoCs
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-01_7b87960278ef6fedb65476d42fec0c14_backswap_icedid
    .exe windows:4 windows x86 arch:x86

    9d5552b3a103c723c650b0d7a6310980


    Headers

    Imports

    Sections