General
- Target IcedID Doc
- Size 114KB
- Sample200717-ldaj4624x6
- SHA256 b500e4af65eb9eea068b784f2ff09a2f300f86bea8d09fe4ee8aabd8858c32ed
- MD5 b5934c0320a01f2482eeb3edcd94747a
- SHA1 84e893030b078ee3a3230a7f3347ce8069c14cdc
- SHA512 03639750d7cab927bc7215da9e8d204fb43f1cebfc772ceb6ad9a81833b346f698a698abcdd70b15adb9751694d36db0a4dc78cabd0dd89ac29a33da51493b34
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
IcedID Doc.doc
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
IcedID Doc.doc
Resource
win10v200430
0 signatures
0 seconds
Malware Config
Targets
-
- Target IcedID Doc
- Size 114KB
- SHA256 b500e4af65eb9eea068b784f2ff09a2f300f86bea8d09fe4ee8aabd8858c32ed
- MD5 b5934c0320a01f2482eeb3edcd94747a
- SHA1 84e893030b078ee3a3230a7f3347ce8069c14cdc
- SHA512 03639750d7cab927bc7215da9e8d204fb43f1cebfc772ceb6ad9a81833b346f698a698abcdd70b15adb9751694d36db0a4dc78cabd0dd89ac29a33da51493b34
- MD5 SHA1 SHA512
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.