General

  • Target

    2024-05-22_ceeb0e4b2de35d8db99da88616ee8c1d_floxif_icedid

  • Size

    3.3MB

  • Sample

    240522-p1wnjaca3x

  • MD5

    ceeb0e4b2de35d8db99da88616ee8c1d

  • SHA1

    e5b0d0dceefb9112405aa97e75a8e6ff0fd6f9fa

  • SHA256

    a9ad520d999ea6d5897d70806a02703afdb901d78aa93e484e79f8b96b84ca22

  • SHA512

    4438f038af6bd52398d058a617f8286d269d4ea32f6c7cb9d0933d3395fb48fb8e98e85bb2dcdc0d33dbd269147460e7e0c9604decaab45a339a4533b53b482b

  • SSDEEP

    49152:hUtaLZd5KAxBtFNPBN3N+rwItb9ug2ZPV/yiwbRoNrY:hUoLZd5KAxrFNZN3NUwItb9uNPV/yuc

Malware Config

Targets

    • Target

      2024-05-22_ceeb0e4b2de35d8db99da88616ee8c1d_floxif_icedid

    • Size

      3.3MB

    • MD5

      ceeb0e4b2de35d8db99da88616ee8c1d

    • SHA1

      e5b0d0dceefb9112405aa97e75a8e6ff0fd6f9fa

    • SHA256

      a9ad520d999ea6d5897d70806a02703afdb901d78aa93e484e79f8b96b84ca22

    • SHA512

      4438f038af6bd52398d058a617f8286d269d4ea32f6c7cb9d0933d3395fb48fb8e98e85bb2dcdc0d33dbd269147460e7e0c9604decaab45a339a4533b53b482b

    • SSDEEP

      49152:hUtaLZd5KAxBtFNPBN3N+rwItb9ug2ZPV/yiwbRoNrY:hUoLZd5KAxrFNZN3NUwItb9uNPV/yuc

    • UPX dump on OEP (original entry point)

    • Modifies AppInit DLL entries

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Checks whether UAC is enabled

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks