General

  • Target

    2024-04-21_b2d7c2ab270500c7e5832cc9dbec6d7c_hacktools_icedid

  • Size

    3.8MB

  • MD5

    b2d7c2ab270500c7e5832cc9dbec6d7c

  • SHA1

    d43f39f630fb5781106d0d6929289c4c0c05bc4f

  • SHA256

    ff7b2d98778b21b2a7848042c9fbb456f48fff7cab4141734ec630c7ad294f70

  • SHA512

    f9b245609a47429ed5d5b5d29a06d990dd8274f78728fa79e31502e2e200ff3394397d32c3ece036c8ac04cf84a2706d225ceabf5dd0a17cdfb17e4bd2ecb290

  • SSDEEP

    49152:5Qf5bfhK3+Qzr93oH2rHTFzU3K9n9/X+s8KuqGaX0ToIBAUZLYpr:Q9hKuQzr93W2rh9n9EJBAUZLc

Score
10/10

Malware Config

Signatures

  • Detects Windows executables referencing non-Windows User-Agents 1 IoCs
  • Detects executables packed with VMProtect. 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-21_b2d7c2ab270500c7e5832cc9dbec6d7c_hacktools_icedid
    .exe windows:4 windows x86 arch:x86

    6641a2704075a0db7009f8a150d188a5


    Headers

    Imports

    Sections