Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
09-04-2024 19:17
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2024-04-09_eddee01464d1d7449f564a7eb364b11b_icedid.exe
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-04-09_eddee01464d1d7449f564a7eb364b11b_icedid.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
2024-04-09_eddee01464d1d7449f564a7eb364b11b_icedid.exe
-
Size
1.5MB
-
MD5
eddee01464d1d7449f564a7eb364b11b
-
SHA1
a29116910fc2b84ab7f0770337be0e87e36cdac6
-
SHA256
5243f3789372b44a35836fe8391803e8d7dc057993c1714f90fea60e37781fc5
-
SHA512
d121dba2bc3d7f861e34fd442037d0e3eefab044d7af9d9d524a6334396e3ba5db580e9bb921ce124e236e0dee73ce0a45f41b626cf45157eacb503766ec1c4c
-
SSDEEP
24576:Mhd1Dh4O721ZCh0DwPlm0TtrhdsSft14MztiCzaW5AjzReaW5AjzRQMFU:MX0DN0TF1d0VqM
Score
9/10
Malware Config
Signatures
-
Detects executables packed with Enigma 1 IoCs
resource yara_rule behavioral1/memory/2524-0-0x0000000000400000-0x0000000000580000-memory.dmp INDICATOR_EXE_Packed_Enigma -
Detects packed executables observed in Molerats 1 IoCs
resource yara_rule behavioral1/memory/2524-0-0x0000000000400000-0x0000000000580000-memory.dmp INDICATOR_EXE_Packed_Loader