matiex | 2023-04-27_6865ca56665542cd7d5c1c53a76f32ca_icedid_satan_teardrop[.]exe[.]bin

General

Target

2023-04-27_6865ca56665542cd7d5c1c53a76f32ca_icedid_satan_teardrop.exe.bin
Size

5.0MB
MD5

6865ca56665542cd7d5c1c53a76f32ca
SHA1

a8c9c66b632f5d2fda9d30f765ebc96ea4123c7a
SHA256

6fa0ea46cdf13cc71d9a164d0291f481d3947ec4f35f2cbf7b5c4a51ae3b0aed
SHA512

ae134bb33333ebbed97acf52a67310b191fe03899bcb1948f3da3a89c04c9d00a892cd0f9190cfd4fef258719cc9f66c87e75bed2d87f9d342f9bb46d6f68505
SSDEEP

49152:ptErfhsOSMa1xYus4Q2D2TgG6hN3gSVsmqoyeBe4:ptEbfa1xNL2g3mrEB/

Score

10^/10

Family

icedid

Detected TEARDROP fileless dropper 1 IoCs
TEARDROP is a memory-only dropper which can read files/registry keys, decode an embedded payload, and load it directly into memory.
dropper backdoor

Processes:

resource yara_rule

sample family_teardrop
Icedid family
icedid
Matiex Main payload 1 IoCs

Processes:

resource yara_rule

sample family_matiex
Matiex family
matiex
Teardrop family
teardrop
Detectes Phoenix Miner Payload 1 IoCs
miner

Processes:

resource yara_rule

sample miner_phoenix

resource	yara_rule
sample	family_teardrop

resource	yara_rule
sample	family_matiex

resource	yara_rule
sample	miner_phoenix

2023-04-27_6865ca56665542cd7d5c1c53a76f32ca_icedid_satan_teardrop.exe.bin
.exe .js windows x86