Overview

overview

7

Static

static

3

20240521fa...id.exe

windows7-x64

7

20240521fa...id.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    20240521fa96589961b9650ea9c44268bb42f3e3icedid.exe

  • Size

    3.2MB

  • Sample

    240522-xhh9gscf4w

  • MD5

    fa96589961b9650ea9c44268bb42f3e3

  • SHA1

    cbee4a701e231c64222e578daa1aed136faa7945

  • SHA256

    7ceebd8c3d6580cc052edb2c444560dff903b3f92dd3ac509ed6f63d4036adc7

  • SHA512

    281ed6d1fa5a101d9e7a140abc5947dbf740d571ecfe96496e70e862c690dace2feedb8a63b1aad9752d7ea2ff35e22194a2eda2ed1003f219abcff5d93d9270

  • SSDEEP

    98304:hRwYKnNRKF1pVaNB5EwLwaL+P5zu2jNOcBWR:AnNRUHawP5zuMIIw

Score
7/10
discovery

Malware Config

Targets

    • Target

      20240521fa96589961b9650ea9c44268bb42f3e3icedid.exe

    • Size

      3.2MB

    • MD5

      fa96589961b9650ea9c44268bb42f3e3

    • SHA1

      cbee4a701e231c64222e578daa1aed136faa7945

    • SHA256

      7ceebd8c3d6580cc052edb2c444560dff903b3f92dd3ac509ed6f63d4036adc7

    • SHA512

      281ed6d1fa5a101d9e7a140abc5947dbf740d571ecfe96496e70e862c690dace2feedb8a63b1aad9752d7ea2ff35e22194a2eda2ed1003f219abcff5d93d9270

    • SSDEEP

      98304:hRwYKnNRKF1pVaNB5EwLwaL+P5zu2jNOcBWR:AnNRUHawP5zuMIIw

    Score
    7/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks