68ddc4b6fd624619735a18a789acecf66ae5187722ac9dde86342f0238771b9a | Triage

Sharing

General

Target

2024-04-16_a17a095fdf5e2a444f49e4d6758a3874_icedid
Size

2.8MB
Sample

240416-yfkj7scd5v
MD5

a17a095fdf5e2a444f49e4d6758a3874
SHA1

f4433dca05c6893f26c0c2b61136c2e861955582
SHA256

68ddc4b6fd624619735a18a789acecf66ae5187722ac9dde86342f0238771b9a
SHA512

60f988873eaf787768d0cebc28567d2eee92e10247bd889c5d1c54151fb8375b2d90606f750622c8808c5db7c8a4e6d80698aa3121634069cbb5b12f0bfe0c00
SSDEEP

49152:Mx2HDVONcq7yLdbTChxKCnFnQXBbrtgb/iQvu0UHOa0:JML7Wd6hxvWbrtUTrUHOt

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  2024-04-16_a17a095fdf5e2a444f49e4d6758a3874_icedid
- Size
  
  2.8MB
- MD5
  
  a17a095fdf5e2a444f49e4d6758a3874
- SHA1
  
  f4433dca05c6893f26c0c2b61136c2e861955582
- SHA256
  
  68ddc4b6fd624619735a18a789acecf66ae5187722ac9dde86342f0238771b9a
- SHA512
  
  60f988873eaf787768d0cebc28567d2eee92e10247bd889c5d1c54151fb8375b2d90606f750622c8808c5db7c8a4e6d80698aa3121634069cbb5b12f0bfe0c00
- SSDEEP
  
  49152:Mx2HDVONcq7yLdbTChxKCnFnQXBbrtgb/iQvu0UHOa0:JML7Wd6hxvWbrtUTrUHOt
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2