Overview

overview

10

Static

static

10

2024-09-29...id.exe

windows7-x64

7

2024-09-29...id.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-09-29_aa52642588bdcf39042d5eb9a0d78e49_backswap_icedid

  • Size

    2.6MB

  • MD5

    aa52642588bdcf39042d5eb9a0d78e49

  • SHA1

    9b2aee27d49a48766c9817cee39a40cd653be30a

  • SHA256

    9a4ce39d5efed3bfcd2e3f8d6205cc971283dd62837235d3c20afc321ecdac45

  • SHA512

    06247db478d778c85e5b2f712b38a5d6d1db597b56205f4a09a56dee61bbc25daf19afeba1828e308fe7971d15cdda6f0446b6cb0e274ca4de52c0d2f2349fc4

  • SSDEEP

    24576:5nWYXDaHMv6CorjqnyPQGzh0JONZejOuC+e4mOzrvxiI3ENyesg/jHLxQVIxX6LM:tl1vqjdPQRw/D4mizA0dizLrB51vp

Score
10/10
blackmoon

Malware Config

Signatures

  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 1 IoCs
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-09-29_aa52642588bdcf39042d5eb9a0d78e49_backswap_icedid
    .exe windows:4 windows x86 arch:x86

    9d5552b3a103c723c650b0d7a6310980


    Headers

    Imports

    Sections