General

  • Target

    2024-03-25_c5172de7a5bbc433434b89b886ba280b_icedid_magniber

  • Size

    63.1MB

  • MD5

    c5172de7a5bbc433434b89b886ba280b

  • SHA1

    fe333f8b6c8842e8c03bb0738714759cbc16dd77

  • SHA256

    dfcb5956d69bee068e0f22cf159b826667afa7869bdd341b149405982e5f4031

  • SHA512

    9b3bd84df56c980c9d5555eb425fb4ddce62ddc778a7346235dd34c6f647647fef6ebf1549a15c56397c388b275e5d4569b7d6cb18b4aa8cb7a94ac134c7a3bf

  • SSDEEP

    393216:Zs1CImksgbzWFOkzgbzWFPwBEAlr7CJaf/1CPwDv3uFQlU2lvzdNeM:ZIpjzckalaigNeM

Score
10/10

Malware Config

Signatures

  • Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers. 1 IoCs
  • Detects executables containing SQL queries to confidential data stores. Observed in infostealers 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-25_c5172de7a5bbc433434b89b886ba280b_icedid_magniber
    .exe windows:5 windows x86 arch:x86

    9158747dc6240279afce84ac4d726c82


    Headers

    Imports

    Sections