Overview

overview

10

Static

static

10

2040-68-0x...ry.dll

windows7-x64

8

Resubmissions

23-03-2024 00:25

240323-aqm63sde91 10

02-03-2024 20:18

240302-y3jw7ahe26 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2040-68-0x0000000000110000-0x0000000000119000-memory.dmp

  • Size

    36KB

  • Sample

    240323-aqm63sde91

  • MD5

    b9012638e830a9463abe8233faacb4cc

  • SHA1

    5592b84f53d5438af898303398024ac9a517bee8

  • SHA256

    351595dd56ff30024943a91b71291d7f2858702fd9f7b9c6d67ba071df8456c4

  • SHA512

    4ec8e522c87da36228c736728625c54dd257bddd3ef3d03c36d9b96d662d42383ce800cdc0de8c61615ecc3cd9d56f8cfca1b5baf2af74f54b60710d3c8163e9

  • SSDEEP

    384:s5Jxayczq7Yjt9lfle9s6PLIpw6kYGi8C:s5DHYeIlfle9HDfiN

Score
10/10
icedid2171387498loader

Malware Config

Extracted

Family

icedid

Campaign

2171387498

C2

avroralikhaem.com

Targets

    • Target

      2040-68-0x0000000000110000-0x0000000000119000-memory.dmp

    • Size

      36KB

    • MD5

      b9012638e830a9463abe8233faacb4cc

    • SHA1

      5592b84f53d5438af898303398024ac9a517bee8

    • SHA256

      351595dd56ff30024943a91b71291d7f2858702fd9f7b9c6d67ba071df8456c4

    • SHA512

      4ec8e522c87da36228c736728625c54dd257bddd3ef3d03c36d9b96d662d42383ce800cdc0de8c61615ecc3cd9d56f8cfca1b5baf2af74f54b60710d3c8163e9

    • SSDEEP

      384:s5Jxayczq7Yjt9lfle9s6PLIpw6kYGi8C:s5DHYeIlfle9HDfiN

    Score
    8/10

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks system information in the registry

      System information is often read in order to detect sandboxing environments.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

Query Registry

4
T1012

System Information Discovery

3
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks