General

  • Target

    2024-10-12_026dd6c15f54beb21f230db66ac19d09_backswap_icedid

  • Size

    2.6MB

  • MD5

    026dd6c15f54beb21f230db66ac19d09

  • SHA1

    ef81528bb0c32b59d2d2119079c131848e31ac12

  • SHA256

    77097768937f972cf12a8912bd131c97f500b3259cae085b0578cb2c2db55f0c

  • SHA512

    0828675140399f7b01f56619bd3b36f2c38606df20c271e0ed432fbb1e9060654721474f3d4ae28bdefed0dc2bbe0235d999dfaba539d4985e57740df6f6e4dc

  • SSDEEP

    24576:5nWYXDaHMv6CorjqnyPQGzh0JONZejOuC+e4mOzrvxiI3ENyesg/jHLxQVIxX6Lf:tl1vqjdPQRw/D4mizA0dizLrB51v2

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-10-12_026dd6c15f54beb21f230db66ac19d09_backswap_icedid
    .exe windows:4 windows x86 arch:x86

    9d5552b3a103c723c650b0d7a6310980


    Headers

    Imports

    Sections