General
-
Target
2023-08-26_7b6a1a2e5af13e3f65c358a923d0b7ed_icedid_JC.exe
-
Size
1.9MB
-
Sample
231011-qy3vhaae2w
-
MD5
7b6a1a2e5af13e3f65c358a923d0b7ed
-
SHA1
264e93b241565af53d07bdfb32cdd7a2cb13ebd9
-
SHA256
7b70790d1877a151bb57ba28cea0c7159e343ac0c547a6b49f74a471c69a4c15
-
SHA512
652155aaaa9f4e98b44a1146854e35ef256b185fef329cb65c7b6c7f93244131557214f03ce28184aa2ad961f597ef6c2012f8c61570f9615c38e539576e9ff9
-
SSDEEP
49152:pm8ndbTChxKCnFnQXBbrtgb/iQvu0UHOagV:pmkd6hxvWbrtUTrUHOH
Static task
static1
Behavioral task
behavioral1
Sample
2023-08-26_7b6a1a2e5af13e3f65c358a923d0b7ed_icedid_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2023-08-26_7b6a1a2e5af13e3f65c358a923d0b7ed_icedid_JC.exe
Resource
win10v2004-20230915-en
Malware Config
Targets
-
-
Target
2023-08-26_7b6a1a2e5af13e3f65c358a923d0b7ed_icedid_JC.exe
-
Size
1.9MB
-
MD5
7b6a1a2e5af13e3f65c358a923d0b7ed
-
SHA1
264e93b241565af53d07bdfb32cdd7a2cb13ebd9
-
SHA256
7b70790d1877a151bb57ba28cea0c7159e343ac0c547a6b49f74a471c69a4c15
-
SHA512
652155aaaa9f4e98b44a1146854e35ef256b185fef329cb65c7b6c7f93244131557214f03ce28184aa2ad961f597ef6c2012f8c61570f9615c38e539576e9ff9
-
SSDEEP
49152:pm8ndbTChxKCnFnQXBbrtgb/iQvu0UHOagV:pmkd6hxvWbrtUTrUHOH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory
-