General
- Target 2024-02-28_adf8fe1015c50443961dfd39cf180e88_icedid_wapomi
- Size 548KB
- Sample240228-nvanfaag41
- SHA256 a89b7a8dc56f3e3a036e503fddb14c28f00f54ddd93cf698329857f32be52689
- MD5 adf8fe1015c50443961dfd39cf180e88
- SHA1 5eb6c1b37426347a93bfdf6b9abd9a77ca9a77ab
- SHA512 f170fa5d20a224e69982402569a1efc9e7157dbb4e9e7d3e7b79e39a3f5a7028796a9edcad0f35d2e474fd611032fcae7989782568a7fec9677c1ea436d18697
- SSDEEP 6144:iVj1Wy5xoFJdRTpqKpYwiLc+xI+bd+klDkZ4QyoXWJE9q32737n0tmGsSIrDvpAJ:cWy5xoFJUdiBS
- MD5 SHA1 SHA512 SSDEEP
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2024-02-28_adf8fe1015c50443961dfd39cf180e88_icedid_wapomi.exe
Resource
win7-20240221-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-02-28_adf8fe1015c50443961dfd39cf180e88_icedid_wapomi.exe
Resource
win10v2004-20240226-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2024-02-28_adf8fe1015c50443961dfd39cf180e88_icedid_wapomi
- Size 548KB
- SHA256 a89b7a8dc56f3e3a036e503fddb14c28f00f54ddd93cf698329857f32be52689
- MD5 adf8fe1015c50443961dfd39cf180e88
- SHA1 5eb6c1b37426347a93bfdf6b9abd9a77ca9a77ab
- SHA512 f170fa5d20a224e69982402569a1efc9e7157dbb4e9e7d3e7b79e39a3f5a7028796a9edcad0f35d2e474fd611032fcae7989782568a7fec9677c1ea436d18697
- SSDEEP 6144:iVj1Wy5xoFJdRTpqKpYwiLc+xI+bd+klDkZ4QyoXWJE9q32737n0tmGsSIrDvpAJ:cWy5xoFJUdiBS
- MD5 SHA1 SHA512 SSDEEP
Score9/10-
Detects executables packed with ASPack
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL