General
-
Target
2023-08-26_dc80b9ccf21ff0d1e24c3e8c12653b61_icedid_JC.exe
-
Size
3.6MB
-
Sample
231010-1n9keaff38
-
MD5
dc80b9ccf21ff0d1e24c3e8c12653b61
-
SHA1
0d6118232e19b92ae42c8c563262f71a94fce098
-
SHA256
614c340cd7a488da3f1f3692beeb10ffa742fd13a751875e4e04db05bd648e75
-
SHA512
9e0f4b33473162754a1af9f57605650222de74cbeb6805c6a03c2b3da350db50bb5089a17241d2f8dc08f7c1a8fd6313fd66bc333991d6881c9c06353bdbd357
-
SSDEEP
49152:DorhXKokLLBIu14IfKsIUHxPp0eMzAEAXv9f4y5vXgsSx4OE+omQJBLpFHTEGKHD:kBKoULRyyMzA/d4y7++JBLpFytB
Static task
static1
Behavioral task
behavioral1
Sample
2023-08-26_dc80b9ccf21ff0d1e24c3e8c12653b61_icedid_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2023-08-26_dc80b9ccf21ff0d1e24c3e8c12653b61_icedid_JC.exe
Resource
win10v2004-20230915-en
Malware Config
Targets
-
-
Target
2023-08-26_dc80b9ccf21ff0d1e24c3e8c12653b61_icedid_JC.exe
-
Size
3.6MB
-
MD5
dc80b9ccf21ff0d1e24c3e8c12653b61
-
SHA1
0d6118232e19b92ae42c8c563262f71a94fce098
-
SHA256
614c340cd7a488da3f1f3692beeb10ffa742fd13a751875e4e04db05bd648e75
-
SHA512
9e0f4b33473162754a1af9f57605650222de74cbeb6805c6a03c2b3da350db50bb5089a17241d2f8dc08f7c1a8fd6313fd66bc333991d6881c9c06353bdbd357
-
SSDEEP
49152:DorhXKokLLBIu14IfKsIUHxPp0eMzAEAXv9f4y5vXgsSx4OE+omQJBLpFHTEGKHD:kBKoULRyyMzA/d4y7++JBLpFytB
Score7/10-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-