General

  • Target

    2024-04-30_3b446deb6aee2ca342272b205ab2129a_floxif_icedid_necurs_skypams

  • Size

    13.5MB

  • MD5

    3b446deb6aee2ca342272b205ab2129a

  • SHA1

    b903eefde41ec5569cde56e1099f658a46742bc6

  • SHA256

    74ece3247e0ac394e26c862fa2000a05e34ecf0316561e4acfc087ee230adf8c

  • SHA512

    21ce4ef2328cc4344481eda62957a7e762f80bedea27adfb8444f3d90ddf636813f0f83bdf2e6b07616dfdace00e8b6ab6d99fc8d5f4541f5351d53192408ba9

  • SSDEEP

    196608:2P+2TT3YcZjgVJ5Fzht2f5JuIG371/P50bczzr4oESybtxnpC3FXtqV9+C81zSwl:k+2/X1xnpOaYsF1aH06

Score
10/10

Malware Config

Signatures

  • Detects executables containing possible sandbox analysis VM usernames 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-30_3b446deb6aee2ca342272b205ab2129a_floxif_icedid_necurs_skypams
    .exe windows:5 windows x86 arch:x86

    3b4fdda4c1ff98b952839d52cf80adfa


    Headers

    Imports

    Sections