General

  • Target

    2024-03-27_7faa4b706e37e7147a1709aa1dc0005f_icedid

  • Size

    2.1MB

  • MD5

    7faa4b706e37e7147a1709aa1dc0005f

  • SHA1

    c6ef780d630acb32ed64183524f47ad1ff9813e3

  • SHA256

    ccbf4702121ca34f92ae350c263e36afa3f855eab6b353a278b9fe8047284fda

  • SHA512

    139a48f1814f8a619f7ea039682a4ee7db23c694e2b42753cba92729cabd866d727e5e66f41da6c5e41bf30601a55fd3f6e06558f1b5984ea20d854313c9de5c

  • SSDEEP

    49152:NnsHyjtk2MYC5GDhxtsXRcHXVF1FgL15pQIk:Nnsmtk2ataR

Score
10/10

Malware Config

Signatures

  • Detects Windows executables referencing non-Windows User-Agents 1 IoCs
  • Detects executables (downlaoders) containing URLs to raw contents of a paste 1 IoCs
  • Detects executables Discord URL observed in first stage droppers 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-27_7faa4b706e37e7147a1709aa1dc0005f_icedid
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections