General

  • Target

    2024-03-27_c6a040b09d26b27b4b2e042765009868_icedid

  • Size

    2.0MB

  • MD5

    c6a040b09d26b27b4b2e042765009868

  • SHA1

    69e0aa95fdf46a52726fd0e35af5f2eca3dd7867

  • SHA256

    655fa8e045bafdd00e4e00193be6fefbd62a44e09c11b729e34497feb6e274ea

  • SHA512

    479572d5f5016d66a644f817225a98f501284ba3b39d185532c67d025fe03e2cd432573ca980133f232d5cba10a503d5df33c5afbb92b31af5b7f8e913674204

  • SSDEEP

    49152:KnsHyjtk2MYC5GD8Tq24GjdGS9hWb2J3Y2pzEBOgpjoVuQr:Knsmtk2aAEjdGSGb2Jo2Dxr

Score
10/10

Malware Config

Signatures

  • Detects Windows executables referencing non-Windows User-Agents 1 IoCs
  • Detects executables Discord URL observed in first stage droppers 1 IoCs
  • Detects executables manipulated with Fody 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-27_c6a040b09d26b27b4b2e042765009868_icedid
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections