General
- Target 2024-04-04_8dcef7c196a956126365a26069a0969d_icedid_ramnit
- Size 8.1MB
- Sample240404-v5751sed23
- SHA256 5e8962d101029796689752b52989d9d5850282fa82d1eeb5cd743207be821ef1
- MD5 8dcef7c196a956126365a26069a0969d
- SHA1 34c4ab98d979132ee3f3bdbb60911bc184a2c727
- SHA512 6fd5e671a896596ac30b838ddba0c2c3dbc492082732e582e46fcac6323e6ef39f0f8712ad4bda2743489278606da9332f4b053b043387202463e407da99e8fe
- SSDEEP 98304:tdYOXwnS4rVR5v77GBfWx77GBfWGLMK+JL/+YOXwnS4rVv5mMrm1RF4HiIDQURma:AIcRGBfW1GBfWg+lIcJyHFQiuQ9w3
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2024-04-04_8dcef7c196a956126365a26069a0969d_icedid_ramnit.exe
Resource
win7-20240221-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-04-04_8dcef7c196a956126365a26069a0969d_icedid_ramnit.exe
Resource
win10v2004-20240319-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2024-04-04_8dcef7c196a956126365a26069a0969d_icedid_ramnit
- Size 8.1MB
- SHA256 5e8962d101029796689752b52989d9d5850282fa82d1eeb5cd743207be821ef1
- MD5 8dcef7c196a956126365a26069a0969d
- SHA1 34c4ab98d979132ee3f3bdbb60911bc184a2c727
- SHA512 6fd5e671a896596ac30b838ddba0c2c3dbc492082732e582e46fcac6323e6ef39f0f8712ad4bda2743489278606da9332f4b053b043387202463e407da99e8fe
- SSDEEP 98304:tdYOXwnS4rVR5v77GBfWx77GBfWGLMK+JL/+YOXwnS4rVv5mMrm1RF4HiIDQURma:AIcRGBfW1GBfWg+lIcJyHFQiuQ9w3
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Modifies WinLogon for persistence
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of SetThreadContext