General
-
Target
2024-04-28_b6bd3510fe1ea53a485125851fe24689_icedid
-
Size
1.2MB
-
Sample
240428-efn3vafe56
-
MD5
b6bd3510fe1ea53a485125851fe24689
-
SHA1
d922de471e1977714828b6a70258c449df945184
-
SHA256
a4ae317aaa5b27ca89de427fed5ce7b477d693690b1087ef4ad2f6733cc7bcb1
-
SHA512
3d3f8a3a10842a6197da9a77e17ef675293c413bbd87150f03d79a4c1edc50beb438621dc6b07e5a4ed283fae938c5b34069bb83e5583274438740219a0d560e
-
SSDEEP
24576:nNQqxk/LBaIt34ya0eKbQUMTAJPl++AJuoyUlztA8hxi:naqxkVaItIVUM2Pl+LVyynbi
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-28_b6bd3510fe1ea53a485125851fe24689_icedid.exe
Resource
win7-20240221-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/
Targets
-
-
Target
2024-04-28_b6bd3510fe1ea53a485125851fe24689_icedid
-
Size
1.2MB
-
MD5
b6bd3510fe1ea53a485125851fe24689
-
SHA1
d922de471e1977714828b6a70258c449df945184
-
SHA256
a4ae317aaa5b27ca89de427fed5ce7b477d693690b1087ef4ad2f6733cc7bcb1
-
SHA512
3d3f8a3a10842a6197da9a77e17ef675293c413bbd87150f03d79a4c1edc50beb438621dc6b07e5a4ed283fae938c5b34069bb83e5583274438740219a0d560e
-
SSDEEP
24576:nNQqxk/LBaIt34ya0eKbQUMTAJPl++AJuoyUlztA8hxi:naqxkVaItIVUM2Pl+LVyynbi
-
Modifies firewall policy service
-
Detects executables packed with Sality Polymorphic Code Generator or Simple Poly Engine or Sality
-
UPX dump on OEP (original entry point)
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Create or Modify System Process
1Windows Service
1