General

  • Target

    2024-04-17_4ddd0ae0080c379777ea86a54edf31b0_hacktools_icedid

  • Size

    15.0MB

  • MD5

    4ddd0ae0080c379777ea86a54edf31b0

  • SHA1

    603ce2d94927562396f0e07f08b3dbb52280eea3

  • SHA256

    74a83906b44e9cbb85d7cb1238a3cf68dab7035a569faec10d8ac37b5140b8aa

  • SHA512

    1701c65202ac3bfb06bd8f74b6ae2e6ef2e3c9590f5e53f0a7c92f7d5031c79693bc9cd2b5416856744b162bcd6d7809d77c8d67c491efae0dcbe28e52d3fc1b

  • SSDEEP

    196608:2KdPiid4g/vyuGmxYwRqXPpkx+nWibXQg9wnl1AH3pSoIgyXUjCdb5d:2GnSg/S8okxWvgg9wn0HAZguNdbf

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Detects executables packed with VMProtect. 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-17_4ddd0ae0080c379777ea86a54edf31b0_hacktools_icedid
    .exe windows:4 windows x86 arch:x86

    59fbec55d534344310dadbc64ec628b3


    Headers

    Imports

    Sections