General

  • Target

    2024-03-27_3c54f3871a17985989d5d66554731485_icedid

  • Size

    1.5MB

  • MD5

    3c54f3871a17985989d5d66554731485

  • SHA1

    c3b176d14255e0c8273599a7365c0db9ee523579

  • SHA256

    f6a0130873529f4d25b3dd7304c63ac91a76262b84e51bdeeb74bc89e7a313c2

  • SHA512

    6202e0ae5c2f41befd756ea41634ccf8f92d58fe8f273c6cf05f1d76e756d43fe31f51665a8fede438725619cd7ac7707e0637e0a54fee3dcf441c89b8645402

  • SSDEEP

    24576:nnsJ39LyjbJkQFMhmC+6GD9Ijc/ghbfFZduP:nnsHyjtk2MYC5GD5/ghbfFE

Score
10/10

Malware Config

Signatures

  • Detects Windows executables referencing non-Windows User-Agents 1 IoCs
  • Detects executables (downlaoders) containing URLs to raw contents of a paste 1 IoCs
  • Detects executables Discord URL observed in first stage droppers 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-27_3c54f3871a17985989d5d66554731485_icedid
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections