General

  • Target

    2024-05-27_8df76c334346f63372264af4f2ce90b8_icedid

  • Size

    11.7MB

  • MD5

    8df76c334346f63372264af4f2ce90b8

  • SHA1

    816891a80c38bce6724cfd65b49fdcf232f070f1

  • SHA256

    1c5960fd46162f949028787b739777b0b049f5160cf00c65600b72eb7f70576a

  • SHA512

    acd00362904c51c6eb943230f672e39701612b9ce24cfb0d8df65f479614ba0626ffcc256c1d2f5e10f86604a3358138583b7501bef396ee5401877903e3f8de

  • SSDEEP

    196608:Hu1y+ktoaETw27OAqdLyZRKJIUV2y1jynXDxnvPrr:25kL2V7puejW2QjKhvn

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • Detects executables packed with ASPack 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-27_8df76c334346f63372264af4f2ce90b8_icedid
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections