General

  • Target

    2024-03-18_907e42cb82005802b633be7b147ad56b_cobalt-strike_icedid_xiaobaminer

  • Size

    739KB

  • MD5

    907e42cb82005802b633be7b147ad56b

  • SHA1

    ae8807384da1eaaa66ae8be827e414af15748aba

  • SHA256

    8f0e81b00412cfd8ee57fb9e4b159d01e09769f54641f98a15c38ffd90c2a387

  • SHA512

    f858fa2b497c62c22e69a95acdca2ec143feab50794d5e275a931d19ebc8e8305cde07eeef3195294f55ee4f486ad1953d6d01e1d4df9169e28f7fb3051faa75

  • SSDEEP

    12288:7Eu+yrSr1Z3jccvQVCrNHtBCACVXAm3ggRUeMz9TNXvkk:7EByc1Z3jc1VCrNHtBCACGm3NCdBTNsk

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-18_907e42cb82005802b633be7b147ad56b_cobalt-strike_icedid_xiaobaminer
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections