Overview

overview

10

Static

static

10

2024-02-18...id.exe

windows7-x64

7

2024-02-18...id.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-18_9f14af7516fb0af99904d607aade6fcc_backswap_icedid

  • Size

    2.6MB

  • MD5

    9f14af7516fb0af99904d607aade6fcc

  • SHA1

    1351bbfcd8d5f5ee2b4ac788561eeae6b9793d0f

  • SHA256

    1d41fccbaba19fb13dd78291983407d10c0170eefeb7711b2ddb01070d351cf1

  • SHA512

    2fa92ad684ef23d5d60d13e74b6d5f30fa9f734753061bda58a950897ae5d95d95a5019eeb467f73160197a62804146fea8cd586dc5600234baef39f43d8ea8b

  • SSDEEP

    24576:5nWYXDaHMv6CorjqnyPQGzh0JONZejOuC+e4mOzrvxiI3ENyesg/jHLxQVIxX6Lv:tl1vqjdPQRw/D4mizA0dizLrB51vO

Score
10/10
blackmoon

Malware Config

Signatures

  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 1 IoCs
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-18_9f14af7516fb0af99904d607aade6fcc_backswap_icedid
    .exe windows:4 windows x86 arch:x86

    9d5552b3a103c723c650b0d7a6310980


    Headers

    Imports

    Sections