General
-
Target
2024-03-15_f09ed27900625d5a12a85d76eabc633f_floxif_icedid
-
Size
638KB
-
Sample
240315-a9f7wace2z
-
MD5
f09ed27900625d5a12a85d76eabc633f
-
SHA1
4e8ad0159d6859fffcc887db650e63413b671d0b
-
SHA256
23587d26a0f3b9e414e890b92e36a57e4c3348744806eb03e7b5a95142ee1a4a
-
SHA512
8d57c4a581c8337b5d37364f7148f98b29508a68f6c1145b52722fce0cd6473ca9dc929e1a4714c85fb33a0d918621b155775cc48bfab4e3521f31f8186a7ff2
-
SSDEEP
12288:l+Q/qbp9auCMd077MI6xZSz4RZXy1390oAfV+R4WqBjvrEH7m:l+Q/njMd/7S5d90P0uWcrEH7m
Malware Config
Targets
-
-
Target
2024-03-15_f09ed27900625d5a12a85d76eabc633f_floxif_icedid
-
Size
638KB
-
MD5
f09ed27900625d5a12a85d76eabc633f
-
SHA1
4e8ad0159d6859fffcc887db650e63413b671d0b
-
SHA256
23587d26a0f3b9e414e890b92e36a57e4c3348744806eb03e7b5a95142ee1a4a
-
SHA512
8d57c4a581c8337b5d37364f7148f98b29508a68f6c1145b52722fce0cd6473ca9dc929e1a4714c85fb33a0d918621b155775cc48bfab4e3521f31f8186a7ff2
-
SSDEEP
12288:l+Q/qbp9auCMd077MI6xZSz4RZXy1390oAfV+R4WqBjvrEH7m:l+Q/njMd/7S5d90P0uWcrEH7m
Score9/10-
UPX dump on OEP (original entry point)
-
Modifies AppInit DLL entries
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Loads dropped DLL
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-