b71b9fce1375705578c7047896381d9eb717c87e485113d972f943efba06237e | Triage

Sharing

General

Target

093835f9ff94f16e7e366bf2c231003d_icedid_JC.exe
Size

6.5MB
Sample

230816-vp9nxaeb7z
MD5

093835f9ff94f16e7e366bf2c231003d
SHA1

97d082663fa8d3031b8af9ae20f9fb8ad3fe312e
SHA256

b71b9fce1375705578c7047896381d9eb717c87e485113d972f943efba06237e
SHA512

6b30bf29abdd24d99bb7f17ae8fcdd8fefcb8d09d77692b65665348f8cfe1c299aaf050e29359b8ec69af46b85091e0cd75d3c153e65f931b48b67ce633804fa
SSDEEP

98304:3+5xKM1Woww2E5T3DoXSG8kM8pNhS9Yw8yp:wS7aTcXSL8Hwfp

Score

8^/10

persistence ransomware

Malware Config

Targets

- Target
  
  093835f9ff94f16e7e366bf2c231003d_icedid_JC.exe
- Size
  
  6.5MB
- MD5
  
  093835f9ff94f16e7e366bf2c231003d
- SHA1
  
  97d082663fa8d3031b8af9ae20f9fb8ad3fe312e
- SHA256
  
  b71b9fce1375705578c7047896381d9eb717c87e485113d972f943efba06237e
- SHA512
  
  6b30bf29abdd24d99bb7f17ae8fcdd8fefcb8d09d77692b65665348f8cfe1c299aaf050e29359b8ec69af46b85091e0cd75d3c153e65f931b48b67ce633804fa
- SSDEEP
  
  98304:3+5xKM1Woww2E5T3DoXSG8kM8pNhS9Yw8yp:wS7aTcXSL8Hwfp
Score

8^/10

persistence ransomware
- Drops file in Drivers directory
- Adds Run key to start application
  persistence
- Sets desktop wallpaper using registry
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Defacement

Tasks

static1

behavioral1

behavioral2

persistenceransomware