5cf8866edfc44fac8f680bc3a2bebae90917aee7084df5e50c133b6b769aae1d | Triage

Sharing

General

Target

fcc4259bea06615330063d744db5c5d9_icedid_JC.exe
Size

3.1MB
Sample

230831-xfd7rahc3w
MD5

fcc4259bea06615330063d744db5c5d9
SHA1

c6a882fce921f72f9275b150012e2011650827fd
SHA256

5cf8866edfc44fac8f680bc3a2bebae90917aee7084df5e50c133b6b769aae1d
SHA512

6ad7b3120c2b37128d81b5f677fc52ca59779d11d57e071853dd22101146b9c14951ef4ae7592d8e1b76fa289ca9e756136508c358bdf579739171d2846ed605
SSDEEP

49152:aXvQDdAunM2wn+O93+xoTzf2ogu6L7SxcnluHjB8eliu+c2XGmPIq:kvIdAunMPnruIDgu1HOcvq

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  fcc4259bea06615330063d744db5c5d9_icedid_JC.exe
- Size
  
  3.1MB
- MD5
  
  fcc4259bea06615330063d744db5c5d9
- SHA1
  
  c6a882fce921f72f9275b150012e2011650827fd
- SHA256
  
  5cf8866edfc44fac8f680bc3a2bebae90917aee7084df5e50c133b6b769aae1d
- SHA512
  
  6ad7b3120c2b37128d81b5f677fc52ca59779d11d57e071853dd22101146b9c14951ef4ae7592d8e1b76fa289ca9e756136508c358bdf579739171d2846ed605
- SSDEEP
  
  49152:aXvQDdAunM2wn+O93+xoTzf2ogu6L7SxcnluHjB8eliu+c2XGmPIq:kvIdAunMPnruIDgu1HOcvq
Score

8^/10

persistence
- Sets service image path in registry
  persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2