Overview

overview

10

Static

static

10

2024-05-20...id.exe

windows7-x64

9

2024-05-20...id.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-20_65489c337359e4fc7f087522091c7296_icedid

  • Size

    47.1MB

  • MD5

    65489c337359e4fc7f087522091c7296

  • SHA1

    22ff880ef3d38109a7410743c35dac80a1e0622c

  • SHA256

    05d956a5aa2add3c869e8de4dbc1ca90486f2f3462518f768f0f03ec5332dda4

  • SHA512

    a7a1ba8be78926d404e417c695488a1b235d2ca5d8de713f261b14b003b1032f090e9d4d6fb1af371bb14a8e5952448971cdb84fdcfe612d01a41474c1375152

  • SSDEEP

    786432:fidtp4+Aq0cfkxP3Ga7rolEYslvfXx+Qmnb6CffW/sfH6s7zQcKDsVv/JLSF6689:fOtp4DqBfPVEYslInb6CffW/sfH6s7zb

Score
10/10

Malware Config

Signatures

  • Detects executables calling ClearMyTracksByProcess 1 IoCs
  • Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
  • Detects executables packed with VMProtect. 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-20_65489c337359e4fc7f087522091c7296_icedid
    .exe windows:4 windows x86 arch:x86

    0d90bd0308d646f07c3cd7ffdf512bef


    Headers

    Imports

    Sections