General
-
Target
2024-03-27_6b183f78c90e35ba8dea8c8c89a3eb40_icedid
-
Size
2.3MB
-
MD5
6b183f78c90e35ba8dea8c8c89a3eb40
-
SHA1
38cfc62128701fecfc4cc576c881f90f6e3f8266
-
SHA256
474e7cb58bd26b2a7d8ab1b802a1e46f3b1446933bb307ddaa0b310465930410
-
SHA512
c242ca1949cb22dc5bea39fdedb1f72ad724aace19e2776cca2005dd973ce304e5c1db3eadc2e92a0ffd6edb527f512b6bee06825259d4f6a7ff3b03d15beb1f
-
SSDEEP
49152:CnsHyjtk2MYC5GDJtmYwx5HogOArVFtIdgfV5xss:Cnsmtk2au8Ywr/
Score
10/10
Malware Config
Signatures
-
Detects Windows executables referencing non-Windows User-Agents 1 IoCs
-
Detects executables (downlaoders) containing URLs to raw contents of a paste 1 IoCs
-
Detects executables Discord URL observed in first stage droppers 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2024-03-27_6b183f78c90e35ba8dea8c8c89a3eb40_icedid
Headers
Sections