Overview

overview

9

Static

static

3

2024-04-20...mi.exe

windows7-x64

9

2024-04-20...mi.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-20_27508178892d45dd9fddad9302daef44_icedid_wapomi

  • Size

    640KB

  • Sample

    240420-lct81sea3w

  • MD5

    27508178892d45dd9fddad9302daef44

  • SHA1

    1f9155d53d41df7530cd8c0b74f78718b695914d

  • SHA256

    72c8a4c1b053f195af0ad6a2ab7623ecb34c8722458eb96e44e45f9ae79db4b3

  • SHA512

    623153a54edbe98ed30f64cd4198acab2195808c0ac56af45fae5c1bb3044741af524238e25f88720e0bd2f561b8bd11b921450880ddc70f5361a9905e0603fc

  • SSDEEP

    12288:hJUvxKcxpJ6HL3D0jwiZcaKqqnfrjSZYqWP8Eq7tbgVv09smaM:U3xQDdiZcaKZYkq7tbg9

Score
9/10
aspackv2

Malware Config

Targets

    • Target

      2024-04-20_27508178892d45dd9fddad9302daef44_icedid_wapomi

    • Size

      640KB

    • MD5

      27508178892d45dd9fddad9302daef44

    • SHA1

      1f9155d53d41df7530cd8c0b74f78718b695914d

    • SHA256

      72c8a4c1b053f195af0ad6a2ab7623ecb34c8722458eb96e44e45f9ae79db4b3

    • SHA512

      623153a54edbe98ed30f64cd4198acab2195808c0ac56af45fae5c1bb3044741af524238e25f88720e0bd2f561b8bd11b921450880ddc70f5361a9905e0603fc

    • SSDEEP

      12288:hJUvxKcxpJ6HL3D0jwiZcaKqqnfrjSZYqWP8Eq7tbgVv09smaM:U3xQDdiZcaKZYkq7tbg9

    Score
    9/10
    aspackv2

    • Detects executables packed with ASPack

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks