General

  • Target

    2024-04-10_77db749abb5dade46b1ed8a46103ee71_backswap_icedid

  • Size

    2.6MB

  • MD5

    77db749abb5dade46b1ed8a46103ee71

  • SHA1

    02b47ded4017ef4a34febad0681e3bf54f8bf473

  • SHA256

    a30e435a045c805a40d8ae74b939f05b7595215b2c9d1c56078d4a310c9cea98

  • SHA512

    b27146b478d0d358b0cc0bb5cc36edd6401ff5df61a9a8c654fac317cbd2bb66b7c46d8e7db1c2f732009676e5ecc0c6c2387e6fce3a453882dd38eb21e34b84

  • SSDEEP

    24576:5nWYXDaHMv6CorjqnyPQGzh0JONZejOuC+e4mOzrvxiI3ENyesg/jHLxQVIxX6L9:tl1vqjdPQRw/D4mizA0dizLrB51vM

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-10_77db749abb5dade46b1ed8a46103ee71_backswap_icedid
    .exe windows:4 windows x86 arch:x86

    9d5552b3a103c723c650b0d7a6310980


    Headers

    Imports

    Sections