General
-
Target
2024-03-27_b8120596e5358f227f729f51a5e3fbdc_icedid
-
Size
1.7MB
-
MD5
b8120596e5358f227f729f51a5e3fbdc
-
SHA1
cbc6b6b0aaf8bcb6bcbaabfad8c206a5e63781ad
-
SHA256
22f130cab5d10a1258c1b3a6656eb62f71cfb2220c8dd204559ed59bc64fd4f5
-
SHA512
164c427ac4d8897041bb153df9810cbeded139e1b6d65412b6f4b94c58b910c9d1c4f3586185fcd4c82bd34d13fd98cc65139fec6582a8ce917da9d8083a1c3d
-
SSDEEP
49152:TnsHyjtk2MYC5GDXTq24GjdGS9hWb2J3Y2p3YJ:Tnsmtk2a/EjdGSGb2Jo2a
Score
10/10
Malware Config
Signatures
-
Detects Windows executables referencing non-Windows User-Agents 1 IoCs
-
Detects executables Discord URL observed in first stage droppers 1 IoCs
-
Detects executables manipulated with Fody 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2024-03-27_b8120596e5358f227f729f51a5e3fbdc_icedid
Headers
Sections