General
-
Target
dd9e5c7feca5dcb70111b9fc62388226d59ef4cbee79ff5a9e7e0d138baaaa54
-
Size
2.3MB
-
Sample
230201-xqw6badc3z
-
MD5
f030c0022efcca958dd71c3906951db3
-
SHA1
74fffbf32b55410dbf6869d093f775c819502d1b
-
SHA256
dd9e5c7feca5dcb70111b9fc62388226d59ef4cbee79ff5a9e7e0d138baaaa54
-
SHA512
dd1da71277a0ee27ccda0b4d947e99af805be44acc1ba86663dba82289a20b71bd76afc12895f24e95b7285b22dffda720a3c6714cfef6c5e650fe3d7527fe7d
-
SSDEEP
49152:93rDMUm0x6DO/LsuVFjrxltrorgQKBJwWAkM4PBQ9K:93rYUZxOO/LHnjlQkFbwWA945QA
Static task
static1
Behavioral task
behavioral1
Sample
dd9e5c7feca5dcb70111b9fc62388226d59ef4cbee79ff5a9e7e0d138baaaa54.exe
Resource
win7-20221111-en
Malware Config
Extracted
icedid
835012302
firenicatrible.com
Targets
-
-
Target
dd9e5c7feca5dcb70111b9fc62388226d59ef4cbee79ff5a9e7e0d138baaaa54
-
Size
2.3MB
-
MD5
f030c0022efcca958dd71c3906951db3
-
SHA1
74fffbf32b55410dbf6869d093f775c819502d1b
-
SHA256
dd9e5c7feca5dcb70111b9fc62388226d59ef4cbee79ff5a9e7e0d138baaaa54
-
SHA512
dd1da71277a0ee27ccda0b4d947e99af805be44acc1ba86663dba82289a20b71bd76afc12895f24e95b7285b22dffda720a3c6714cfef6c5e650fe3d7527fe7d
-
SSDEEP
49152:93rDMUm0x6DO/LsuVFjrxltrorgQKBJwWAkM4PBQ9K:93rYUZxOO/LHnjlQkFbwWA945QA
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-