icarusstealer | 452626fde5fe734c9deb87ae8343ec4cfb9a425708f4c7667cb527782a809d95 | Triage

Sharing

General

Target

e1b571f44d4761081c56d29467bac4f7.bin
Size

473KB
Sample

230826-cdkljagb32
MD5

86240d52909ea1f40906180d7157bfee
SHA1

78d77061db415ec00d3ad4d01aedeb671b5d5827
SHA256

452626fde5fe734c9deb87ae8343ec4cfb9a425708f4c7667cb527782a809d95
SHA512

224f6e0122426cf9a15b66f5db531297382ae5bceb1d5d2875774f6736c1137aa7cd04616753d8d3da4a537443e8f536b19a0f3d70c7335373759ba6d221a404
SSDEEP

12288:S+TjMoEOV1QW2i9NKTLvDb02rtb3MF4oPjAhctEzkNOmWK1iq:SgjMoEO8riXKT7F1c2OjAqtYscKoq

Score

10^/10

icarusstealer evasion stealer trojan

Malware Config

Extracted

Family

icarusstealer

C2

192.168.1.106

Attributes

payload_url
https://blackhatsec.org/add.jpg
https://blackhatsec.org/remove.jpg
https://raw.githubusercontent.com/GodOfWareFare/TheGoodKidPhotos/main/rt.jpg

Targets

- Target
  
  d3544b079602557b6633eeba817ba5131d7069a5be7bd6b22dfdafee844512dc.exe
- Size
  
  783KB
- MD5
  
  e1b571f44d4761081c56d29467bac4f7
- SHA1
  
  37f8c4277fc57eb3fed752f25e90df05eefaaca5
- SHA256
  
  d3544b079602557b6633eeba817ba5131d7069a5be7bd6b22dfdafee844512dc
- SHA512
  
  77ade273ad61a7db2cbf9441d9a2288aa44470f155c50ab3e95b8562a2f6a9980fcf8a5e41b97259b7eddbe7b1be8f8926ee35f8e62d4766d6d8054f7fb89914
- SSDEEP
  
  12288:6KiRFtly8DLSbHx7c2s/ckj33aXehQvzGP7n1P6+Zecb:6KeygWBHs0k7r71P6+Zes
Score

10^/10

icarusstealer evasion stealer trojan
- IcarusStealer
  Icarus is a modular stealer written in C# First adverts in July 2022.
  stealer icarusstealer
- Windows security bypass
  evasion trojan
- Windows security modification
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

behavioral2

icarusstealerevasionstealertrojan