Overview

overview

10

Static

static

10

2024-04-04...id.exe

windows7-x64

7

2024-04-04...id.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-04_8ec852fee56bea689745f55040dd9596_backswap_icedid

  • Size

    2.6MB

  • MD5

    8ec852fee56bea689745f55040dd9596

  • SHA1

    542be75dc33f991d3f146b8f6a1710e5cd589927

  • SHA256

    f6b442c65ea937d431a8787915b9b9672eb058500cff6cacde5eeb8b9207f0f7

  • SHA512

    8ed161588eb8f173e2c323a79591841eb4892cfcfb9d7e34b70f48e6d9b0319c37dc59af14e4b869126fcaaa3226f4290e2ae91ad4d08f36691103d0d74524bb

  • SSDEEP

    24576:5nWYXDaHMv6CorjqnyPQGzh0JONZejOuC+e4mOzrvxiI3ENyesg/jHLxQVIxX6Lk:tl1vqjdPQRw/D4mizA0dizLrB51vx

Score
10/10
blackmoon

Malware Config

Signatures

  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 1 IoCs
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-04_8ec852fee56bea689745f55040dd9596_backswap_icedid
    .exe windows:4 windows x86 arch:x86

    9d5552b3a103c723c650b0d7a6310980


    Headers

    Imports

    Sections