Overview

overview

10

Static

static

10

2024-05-23...id.exe

windows7-x64

3

2024-05-23...id.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-23_4ed606721a9f5d329dea56ae2f6d18da_icedid

  • Size

    2.3MB

  • MD5

    4ed606721a9f5d329dea56ae2f6d18da

  • SHA1

    a41151a5314cedcf22d14c29d062c8cb86a04b32

  • SHA256

    2573ec396b7ac653d5f8b9786e930a31807ae9938569cab2a31319d04cf12037

  • SHA512

    2ea9ba82b0b1e7b411c7d341bdcbe1ff2e0e457b79f7582653ab99d62e2cff528de0bd63ebcb27f64af388e00b3d1e5e24bd5cf1b13100357be9f5224754d28c

  • SSDEEP

    49152:RpV+mAfpE459XUWixlVkw5d2Bn2rn5Kd5WDAfOJvX4:R+mAfpE459XUWiLVzD2Bn2Ed5WkSX

Score
10/10
blackmoon

Malware Config

Signatures

  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 1 IoCs
  • Detects executables packed with VMProtect. 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-23_4ed606721a9f5d329dea56ae2f6d18da_icedid
    .exe windows:4 windows x86 arch:x86

    e46c459d7890cb50405995a252ccb507


    Headers

    Imports

    Sections