General

  • Target

    2024-03-27_86f59b9c2fe05f07425427f07c95261c_icedid

  • Size

    1.5MB

  • MD5

    86f59b9c2fe05f07425427f07c95261c

  • SHA1

    1e9edd1d499c0edc932c82ac9792a7ef58364ee0

  • SHA256

    2b48ab3cf29c08c8fbc459c0e67fb0bf6bb38cf31d759ea99f830e1028e9a28a

  • SHA512

    663cbf523b82c5f2bf1434bcdb822af119f7ef8197979b47f736bc8bc5b167eab88eb1740d853a53ee0a7202b2a12b534efefefdb39396075f1a01bb67b3be07

  • SSDEEP

    24576:+Tm4OrOY6wMdgSYAaaJVFAGecyTlYgSV5Tnsveu:R4izxMdgNA5VFA8hgSV5zs

Score
10/10

Malware Config

Signatures

  • Detects Windows executables referencing non-Windows User-Agents 1 IoCs
  • Detects executables (downlaoders) containing URLs to raw contents of a paste 1 IoCs
  • Detects executables Discord URL observed in first stage droppers 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-27_86f59b9c2fe05f07425427f07c95261c_icedid
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections