General

  • Target

    2024-03-27_a30677bef14dd024525e681c121a10e2_icedid

  • Size

    768KB

  • MD5

    a30677bef14dd024525e681c121a10e2

  • SHA1

    75a8e96b6945cb2a72da4b9ecf4f557a070ec507

  • SHA256

    28fa12db47591b847237d5c35d44d268fbce2c900d47e6ad5ca475ad39f500db

  • SHA512

    9284dbdc93e481aa00fdab1fbb7e39186788b8027021b1a71a3b38cf4d5cb308eeb5097ee05c842c0a2120e4925df66f8aea7dc9ae228e69f73baf5bc333ce87

  • SSDEEP

    6144:YTxxDP116RtypU0i4GIKgLiC1Fek10sbldTRMetJVYI7M:oxxDd16TyGgWjkfRMetbYP

Score
10/10

Malware Config

Signatures

  • Detects Windows executables referencing non-Windows User-Agents 1 IoCs
  • Detects executables Discord URL observed in first stage droppers 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-27_a30677bef14dd024525e681c121a10e2_icedid
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections