2024-05-03_1513b9482e7a1fef12800fe68b6b5f8f_icedid

Sharing

Copy URL

Twitter E-mail

General

Target

2024-05-03_1513b9482e7a1fef12800fe68b6b5f8f_icedid
Size

5.5MB
MD5

1513b9482e7a1fef12800fe68b6b5f8f
SHA1

304b45b3789809370cf2edc5332825bbbbf8ae61
SHA256

bcfa3513885e7a78a738de4c18599901f19b53c95acd15fdbec0230b6205b442
SHA512

664c1179c7d83a85f1d1ad84dcbd47933d817f573949083b57706b82d60a6205968ca40d412c6252f7744fd72e34e98389ee8867790121ff38d9940446f31db1
SSDEEP

98304:DtlDHhcNdTXwagMaNXZNZhuRSn2SKIq1r7vKtl0r5+t+r2cbS1lTxDdlj:v2IHC+2SKIkmqr54+xbS195

Score

1^/10

Malware Config

Signatures

Files

2024-05-03_1513b9482e7a1fef12800fe68b6b5f8f_icedid
.exe windows:5 windows x86 arch:x86

96336c1663a1ae4343c3da4deffb5a89

Code Sign

9b:72:fa:bb:5d:01:f0:be:f4:90:92:e6:72:54:6d:8e
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12-08-2020 00:00

Not After

12-08-2021 23:59

Subject

CN=MM Apps\, Inc.,O=MM Apps\, Inc.,POSTALCODE=L8J 0H6,STREET=8 West Glen Avenue,L=Stoney Creek,ST=Ontario,C=CA

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12-03-2019 00:00

Not After

31-12-2028 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9b:72:fa:bb:5d:01:f0:be:f4:90:92:e6:72:54:6d:8e
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12-08-2020 00:00

Not After

12-08-2021 23:59

Subject

CN=MM Apps\, Inc.,O=MM Apps\, Inc.,POSTALCODE=L8J 0H6,STREET=8 West Glen Avenue,L=Stoney Creek,ST=Ontario,C=CA

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12-03-2019 00:00

Not After

31-12-2028 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

86:8a:71:9a:eb:9c:5d:44:c1:7b:8d:c1:27:4d:86:ee:fa:2b:0c:ee:87:fa:7d:5c:56:f0:a9:21:f6:74:a0:92
Signer

Actual PE Digest

86:8a:71:9a:eb:9c:5d:44:c1:7b:8d:c1:27:4d:86:ee:fa:2b:0c:ee:87:fa:7d:5c:56:f0:a9:21:f6:74:a0:92

Digest Algorithm

sha256

PE Digest Matches

true

13:41:a4:e0:ad:3c:14:7d:ee:96:cf:ea:76:0b:93:68:3c:ec:97:ba
Signer

Actual PE Digest

13:41:a4:e0:ad:3c:14:7d:ee:96:cf:ea:76:0b:93:68:3c:ec:97:ba

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

NdrNonEncapsulatedUnionMemorySize
NdrCorrelationFree
NdrOleFree
RpcBindingInqAuthClientExW
UuidCreate

kernel32

GetFileAttributesExA
GetFileSizeEx
GetFileTime
GetTempFileNameA
VerSetConditionMask
VerifyVersionInfoA
GetProfileIntA
SearchPathA
VirtualProtect
GetSystemTimeAsFileTime
GetCommandLineA
IsDebuggerPresent
IsProcessorFeaturePresent
GetSystemInfo
VirtualAlloc
VirtualQuery
RtlUnwind
ExitProcess
GetModuleHandleExW
CreateThread
ExitThread
HeapQueryInformation
SetStdHandle
GetFileType
GetStdHandle
GetStartupInfoW
GetConsoleMode
SetFilePointerEx
IsValidCodePage
GetStringTypeW
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetTimeZoneInformation
ReadConsoleW
GetDateFormatW
GetTimeFormatW
LCMapStringW
WriteConsoleW
OutputDebugStringW
CreateFileW
SetEnvironmentVariableA
GetVolumeInformationA
DuplicateHandle
UnlockFile
SetEndOfFile
LockFile
FileTimeToLocalFileTime
GetFileSize
FlushFileBuffers
FindFirstFileA
FindClose
GetACP
lstrcmpiA
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
FileTimeToSystemTime
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
CreateMutexA
ReleaseMutex
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
LeaveCriticalSection
EnterCriticalSection
GetCurrentProcessId
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
ResumeThread
SuspendThread
SetThreadPriority
CreateEventA
FreeResource
LoadLibraryW
GetModuleHandleW
GetModuleFileNameW
GetSystemDirectoryW
EncodePointer
OutputDebugStringA
CompareStringA
lstrcmpA
GlobalDeleteAtom
LoadLibraryExW
GetVersionExA
GetCurrentThreadId
GetCurrentThread
SetLastError
CopyFileA
FormatMessageA
MulDiv
LocalFree
GlobalFree
GlobalUnlock
SetErrorMode
GetCPInfo
GetFullPathNameA
GetOEMCP
GlobalLock
GlobalSize
GlobalAlloc
FindResourceExW
MultiByteToWideChar
SetFileTime
GetFileAttributesA
LocalFileTimeToFileTime
GetCurrentDirectoryA
SystemTimeToFileTime
SetFilePointer
DeleteCriticalSection
DecodePointer
HeapSize
RaiseException
HeapDestroy
InitializeCriticalSectionAndSpinCount
GetProcessHeap
HeapFree
HeapAlloc
HeapReAlloc
TerminateThread
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
ReadFile
lstrcpynA
CreateDirectoryA
GetModuleFileNameA
GetCurrentProcess
GetModuleHandleA
GetProcAddress
DeleteFileA
GetTempPathA
WaitForSingleObject
CreateProcessA
Sleep
WriteFile
CreateFileA
lstrlenA
lstrcatA
lstrcpyA
FreeLibrary
LoadLibraryA
GetWindowsDirectoryA
FindResourceA
QueryDosDeviceW
GetNamedPipeInfo
FindCloseChangeNotification
VirtualUnlock
GlobalAddAtomA
GetConsoleProcessList
EnumResourceTypesA
UnregisterWait
GetThreadUILanguage
GetConsoleOutputCP
DeleteVolumeMountPointW
CloseHandle
GetCommandLineW
SetThreadExecutionState
GetThreadPriorityBoost
GetConsoleCP
CreateFileTransactedW
GetTickCount
SetFileAttributesW
GetThreadPreferredUILanguages
GetCommConfig
CreateEventW
GetSystemDirectoryA
GetBinaryTypeA
CommConfigDialogW
SetDynamicTimeZoneInformation
GetProcessId
GetAtomNameW
BuildCommDCBW
QueryFullProcessImageNameW
GetProcessHeaps
FindNextChangeNotification
BuildCommDCBA
GetLastError
SetEvent
Process32Next
FindResourceW
LoadResource
LockResource
SizeofResource
WideCharToMultiByte

user32

DestroyAcceleratorTable
CreateAcceleratorTableA
ToAsciiEx
GetKeyboardState
LoadAcceleratorsW
LockWindowUpdate
MapVirtualKeyExA
IsCharLowerA
GetKeyboardLayout
PostThreadMessageA
IsZoomed
GetComboBoxInfo
LoadMenuW
TrackMouseEvent
MonitorFromPoint
UpdateLayeredWindow
IsMenu
SetWindowRgn
DrawFrameControl
DrawEdge
LoadImageW
DrawStateA
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplayMonitors
SetLayeredWindowAttributes
SetParent
GetSystemMenu
UnionRect
NotifyWinEvent
InvertRect
HideCaret
EnableScrollBar
GetAsyncKeyState
GetIconInfo
DrawIconEx
IsRectEmpty
DrawFocusRect
GetNextDlgGroupItem
GetMenuDefaultItem
ReuseDDElParam
UnpackDDElParam
LoadImageA
OffsetRect
SetRectEmpty
InsertMenuItemA
CreatePopupMenu
LoadMenuA
TranslateAcceleratorA
LoadAcceleratorsA
BringWindowToTop
GetMenuItemInfoA
DestroyMenu
CharUpperA
DestroyIcon
SetRect
IsClipboardFormatAvailable
RealChildWindowFromPoint
DeleteMenu
SystemParametersInfoA
CopyImage
LoadCursorW
ReleaseCapture
SetCapture
WaitMessage
LoadCursorA
GetSysColorBrush
IntersectRect
WindowFromPoint
FillRect
ClientToScreen
EndPaint
BeginPaint
GetWindowDC
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
IsDialogMessageA
SendDlgItemMessageA
CopyAcceleratorTableA
CheckDlgButton
MoveWindow
ShowWindow
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconA
UnhookWindowsHookEx
GetWindow
GetTopWindow
GetClassNameA
GetClassLongA
EqualRect
MapWindowPoints
AdjustWindowRectEx
GetWindowTextLengthA
GetWindowTextA
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
SetForegroundWindow
GetForegroundWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
SetFocus
GetDlgCtrlID
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
IsChild
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
GetMessageTime
RegisterWindowMessageA
GetLastActivePopup
GetWindowThreadProcessId
ShowOwnedPopups
CallNextHookEx
SetWindowsHookExA
GetCursorPos
ValidateRect
GetKeyState
IsWindowVisible
PeekMessageA
DispatchMessageA
TranslateMessage
GetMessageA
LoadBitmapW
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetFocus
CopyRect
MapVirtualKeyA
GetKeyNameTextA
GetDesktopWindow
SetCursorPos
SetClassLongA
GetDoubleClickTime
SetMenuDefaultItem
ModifyMenuA
RegisterClipboardFormatA
GetWindowRgn
DestroyCursor
MapDialogRect
CreateMenu
SubtractRect
GetUpdateRect
TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
DrawMenuBar
GetWindowLongA
SetActiveWindow
IsWindowEnabled
GetActiveWindow
GetNextDlgTabItem
FrameRect
CharUpperBuffA
GetDlgItem
EndDialog
CreateDialogIndirectParamA
DestroyWindow
PostQuitMessage
RemoveMenu
AppendMenuA
InsertMenuA
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringA
UnregisterClassA
PostMessageA
wsprintfA
CopyIcon
InflateRect
ReleaseDC
GetDC
GetParent
IsWindow
SetCursor
PtInRect
ScreenToClient
GetMessagePos
SetTimer
InvalidateRect
MessageBeep
SetWindowLongA
KillTimer
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
GetWindowRect
GetSysColor
SendMessageA
LoadIconW
EnableWindow
MessageBoxA
SetWindowTextA

gdi32

SetRectRgn
DPtoLP
GetTextMetricsA
CreateCompatibleBitmap
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
GetBkColor
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
CombineRgn
Rectangle
EnumFontFamiliesExA
GetRgnBox
OffsetRgn
CreateRoundRectRgn
RoundRect
FrameRgn
PtInRegion
SetPixelV
ExtFloodFill
SetPaletteEntries
FillRgn
GetBoundsRect
GetWindowOrgEx
LPtoDP
GetViewportOrgEx
GetTextFaceA
ScaleViewportExtEx
ScaleWindowExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
ExtTextOutA
TextOutA
MoveToEx
PatBlt
CreateRectRgnIndirect
GetDeviceCaps
CreateDCA
CopyMetaFileA
GetTextExtentPoint32A
CreateFontIndirectA
GetObjectA
Polyline
GetStockObject
SetTextAlign
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateCompatibleDC
BitBlt
SetTextColor
SetBkColor
CreateBitmap

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegEnumKeyExA
RegEnumValueA
RegQueryValueA
RegEnumKeyA
RegSetValueExA
RegDeleteValueA
RegCreateKeyExA
RegOpenKeyExW
CloseServiceHandle
OpenServiceA
OpenSCManagerA
ChangeServiceConfig2A
RegDeleteKeyA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA

shell32

SHAppBarMessage
SHGetFileInfoA
DragQueryFileA
DragFinish
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetDesktopFolder
ShellExecuteA
SHBrowseForFolderA

shlwapi

PathFindExtensionA
PathFindFileNameA
PathIsUNCA
PathStripToRootA
StrFormatKBSizeA
PathRemoveFileSpecW

uxtheme

GetWindowTheme
GetThemeSysColor
GetCurrentThemeName
DrawThemeText
DrawThemeBackground
IsThemeBackgroundPartiallyTransparent
DrawThemeParentBackground
OpenThemeData
CloseThemeData
GetThemePartSize
IsAppThemed
GetThemeColor

ole32

CreateStreamOnHGlobal
CoInitializeEx
CoDisconnectObject
CoInitialize
CoCreateInstance
CoCreateGuid
CoUninitialize
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CoIsHandlerConnected
CreateILockBytesOnHGlobal
CoUnmarshalHresult
CoTreatAsClass
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
DoDragDrop
OleLockRunning
OleCreateMenuDescriptor
ReleaseStgMedium

oleaut32

SysAllocString
VarBstrFromDate
VariantCopy
SysFreeString
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
LoadTypeLi
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SysAllocStringByteLen

wininet

FtpPutFileEx
FtpGetCurrentDirectoryA
InternetSetStatusCallback
InternetCanonicalizeUrlW
GetUrlCacheGroupAttributeW

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

gdiplus

GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipDrawImageRectI

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundA

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 360KB - Virtual size: 359KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

96336c1663a1ae4343c3da4deffb5a89

Code Sign

9b:72:fa:bb:5d:01:f0:be:f4:90:92:e6:72:54:6d:8eCertificate

Extended Key Usages

Key Usages

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95Certificate

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

9b:72:fa:bb:5d:01:f0:be:f4:90:92:e6:72:54:6d:8eCertificate

Extended Key Usages

Key Usages

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95Certificate

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

86:8a:71:9a:eb:9c:5d:44:c1:7b:8d:c1:27:4d:86:ee:fa:2b:0c:ee:87:fa:7d:5c:56:f0:a9:21:f6:74:a0:92Signer

13:41:a4:e0:ad:3c:14:7d:ee:96:cf:ea:76:0b:93:68:3c:ec:97:baSigner

Headers

DLL Characteristics

File Characteristics

Imports

rpcrt4

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

uxtheme

ole32

oleaut32

wininet

oleacc

gdiplus

imm32

winmm

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 360KB - Virtual size: 359KB

.data Size: 27KB - Virtual size: 60KB

.rsrc Size: 3.6MB - Virtual size: 3.6MB

9b:72:fa:bb:5d:01:f0:be:f4:90:92:e6:72:54:6d:8e
Certificate

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

9b:72:fa:bb:5d:01:f0:be:f4:90:92:e6:72:54:6d:8e
Certificate

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

86:8a:71:9a:eb:9c:5d:44:c1:7b:8d:c1:27:4d:86:ee:fa:2b:0c:ee:87:fa:7d:5c:56:f0:a9:21:f6:74:a0:92
Signer

13:41:a4:e0:ad:3c:14:7d:ee:96:cf:ea:76:0b:93:68:3c:ec:97:ba
Signer

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 360KB - Virtual size: 359KB

.data
Size: 27KB - Virtual size: 60KB

.rsrc
Size: 3.6MB - Virtual size: 3.6MB