General

  • Target

    2024-03-23_6e484a2aac47900be56cf520a4952345_icedid

  • Size

    3.5MB

  • Sample

    240323-nh1n4aff36

  • MD5

    6e484a2aac47900be56cf520a4952345

  • SHA1

    a37c0b1c9ddf8b3a78b9fa094cff0a635d0f7f6f

  • SHA256

    fb8496c17eb5056d56eec2bb4f3f4ecde53b7b483a98c7073e8276a46764d9e8

  • SHA512

    46bf4a04792b95a440b46e87aa696acab0661b9ae8cf090ad79391a724c62d0235075bbd62cf14d2b2c8ff86cecbb7d24d744b62e3ca5dc600a25de22897a70b

  • SSDEEP

    49152:abn/uJQIKgL6Sy+mlkb7XkFwdJxyO1t9FWv4IPv8k414+w:abnWzKgnyn67XkFyJxv1t9FLIPv8tu

Malware Config

Targets

    • Target

      2024-03-23_6e484a2aac47900be56cf520a4952345_icedid

    • Size

      3.5MB

    • MD5

      6e484a2aac47900be56cf520a4952345

    • SHA1

      a37c0b1c9ddf8b3a78b9fa094cff0a635d0f7f6f

    • SHA256

      fb8496c17eb5056d56eec2bb4f3f4ecde53b7b483a98c7073e8276a46764d9e8

    • SHA512

      46bf4a04792b95a440b46e87aa696acab0661b9ae8cf090ad79391a724c62d0235075bbd62cf14d2b2c8ff86cecbb7d24d744b62e3ca5dc600a25de22897a70b

    • SSDEEP

      49152:abn/uJQIKgL6Sy+mlkb7XkFwdJxyO1t9FWv4IPv8k414+w:abnWzKgnyn67XkFyJxv1t9FLIPv8tu

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

    • Checks whether UAC is enabled

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks