Overview

overview

10

Static

static

10

2024-04-29...ar.exe

windows7-x64

1

2024-04-29...ar.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-29_95c53196c77ded8d63588b8437260d35_icedid_vidar

  • Size

    3.1MB

  • MD5

    95c53196c77ded8d63588b8437260d35

  • SHA1

    9441d5d7259917d8c69c1875558d43183f52018e

  • SHA256

    9495021ab5e3603a042cd5d2e9df018836f665a2fcc850a1848f80420d0b607e

  • SHA512

    6d475d91069b13dfd3874773cd071b32b71085c504022736423dd817c788563482d1be7b831865bf87d9e58e7e1b9c7f59f76ac334203a9a2d96325be8300952

  • SSDEEP

    49152:s/m8Xs393VLjzY393VLjzvHHHTLzzys2wIxezCxaxGIt1kSt09fXpRJqwlboTESu:s/m8zUxezrxGItKSsfXHJqzEShcL0JE

Score
10/10

Malware Config

Signatures

  • Detects executables containing SQL queries to confidential data stores. Observed in infostealers 1 IoCs
  • Detects executables referencing many confidential data stores found in browsers, mail clients, cryptocurreny wallets, etc. Observed in information stealers 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-29_95c53196c77ded8d63588b8437260d35_icedid_vidar
    .exe windows:5 windows x86 arch:x86

    6e003f4c5d4a61eba0e38a249fb5f1f9


    Headers

    Imports

    Sections