General

  • Target

    2025-04-22_08ea04b322085258eba724fd865a5082_agent-tesla_amadey_backswap_elex_icedid_rhadamanthys_smoke-loader

  • Size

    2.6MB

  • MD5

    08ea04b322085258eba724fd865a5082

  • SHA1

    a89e1d519052dbbdb0ccf072c8fa81c98732300d

  • SHA256

    5f97ffb2c97b838947d7e983209d0a7fc29f678b9104f5b93a2b3654fc2fd03e

  • SHA512

    f37f8ad94ce601824a257682ab063912a0556816c4ec46a3b85ece9d8d34a9e14fcb0cf073ad3fbe9b72bce93a0889269771c89303a10221fdff6ec55aa11ff2

  • SSDEEP

    24576:5nWYXDaHMv6CorjqnyPQGzh0JONZejOuC+e4mOzrvxiI3ENyesg/jHLxQVIxX6Lo:tl1vqjdPQRw/D4mizA0dizLrB51vt

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2025-04-22_08ea04b322085258eba724fd865a5082_agent-tesla_amadey_backswap_elex_icedid_rhadamanthys_smoke-loader
    .exe windows:4 windows x86 arch:x86

    9d5552b3a103c723c650b0d7a6310980


    Headers

    Imports

    Sections