Overview

overview

7

Static

static

3

864290e3e4...JC.exe

windows7-x64

7

864290e3e4...JC.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    864290e3e41a44088ce77f8e9a45b254_hacktools_icedid_JC.exe

  • Size

    5.8MB

  • Sample

    230806-n22qhahh83

  • MD5

    864290e3e41a44088ce77f8e9a45b254

  • SHA1

    9b0b6775aaafe2a1c6f75feca09804f7532c674b

  • SHA256

    ccec3d5e49c5d1de909bc5d9abee147604bdeaca7cd50103a8d27ae5642903a7

  • SHA512

    aea91673cc0d0785136b5fb929b81d018041801a0c6e94e71528a2bdd6bcdc3a6edc74d9ed85a1fd593400adc6072069609a9d73c62a6dbefc3de46400010c5c

  • SSDEEP

    98304:Hd6RAG3iQ8op+ezwWwNIyTQbMGLd51YkPu4cJMGBj4DhDZANxBYtsb:qHL8opj2TMM0LNPy8DpZ+C2b

Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      864290e3e41a44088ce77f8e9a45b254_hacktools_icedid_JC.exe

    • Size

      5.8MB

    • MD5

      864290e3e41a44088ce77f8e9a45b254

    • SHA1

      9b0b6775aaafe2a1c6f75feca09804f7532c674b

    • SHA256

      ccec3d5e49c5d1de909bc5d9abee147604bdeaca7cd50103a8d27ae5642903a7

    • SHA512

      aea91673cc0d0785136b5fb929b81d018041801a0c6e94e71528a2bdd6bcdc3a6edc74d9ed85a1fd593400adc6072069609a9d73c62a6dbefc3de46400010c5c

    • SSDEEP

      98304:Hd6RAG3iQ8op+ezwWwNIyTQbMGLd51YkPu4cJMGBj4DhDZANxBYtsb:qHL8opj2TMM0LNPy8DpZ+C2b

    Score
    7/10
    bootkitpersistenceupx

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks