Analysis
-
max time kernel
144s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
07/06/2024, 00:31
General
-
Target
2024-06-07_371200c2603df5400d7c22cc975c1df9_floxif_icedid.exe
-
Size
8.6MB
-
MD5
371200c2603df5400d7c22cc975c1df9
-
SHA1
fde3c609e0e4eeaecc5680d761d51e50554c8cd8
-
SHA256
8baae531572354e72293332e322eeedbacab4db718c7826b0354d70d3cf034bf
-
SHA512
edb5c67958a53f4a51f9b4d108a3bb7fb1f91b6b8a098a0b03df162f216b15aa97c64fe3ad1397775f14c22dacd4aa1d984d0847c0a801cb59ef6983e9d68654
-
SSDEEP
98304:A0P1zYNsGZgt2boT95Mjq8AV/4jm7QMx9zOcrp6zIe0TTO61jiKh05pz4ftqaGEj:A0P101W825MXau4eY6IbThk0jGAKkOnG
Malware Config
Signatures
-
Detects Windows executables referencing non-Windows User-Agents 4 IoCs
-
UPX dump on OEP (original entry point) 3 IoCs
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
-
Loads dropped DLL 2 IoCs
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Enumerates connected drives 3 TTPs 1 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in Program Files directory 2 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies Internet Explorer settings 1 TTPs 3 IoCs
-
Modifies system certificate store 2 TTPs 3 IoCs
-
Suspicious behavior: EnumeratesProcesses 3 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-06-07_371200c2603df5400d7c22cc975c1df9_floxif_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-06-07_371200c2603df5400d7c22cc975c1df9_floxif_icedid.exe"1⤵
- Loads dropped DLL
- Enumerates connected drives
- Drops file in Program Files directory
- Modifies Internet Explorer settings
- Modifies system certificate store
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
175B
MD51130c911bf5db4b8f7cf9b6f4b457623
SHA148e734c4bc1a8b5399bff4954e54b268bde9d54c
SHA256eba08cc8182f379392a97f542b350ea0dbbe5e4009472f35af20e3d857eafdf1
SHA51294e2511ef2c53494c2aff0960266491ffc0e54e75185427d1ccedae27c286992c754ca94cbb0c9ea36e3f04cd4eb7f032c551cf2d4b309f292906303f1a75fa0
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
342B
MD5d95727b23a84fc1393b618f18cf4cc27
SHA102482b9e35cde1b25c504434377f981c4f7ec447
SHA25696a0d56aa303ad3286b36ea113e789c29311c2927f93b24f9f4cf9c6f4b08b54
SHA51243968f7aaf6f9af2f579c999eaac386442581e2ed0c80ca64a3206c720a0595e179ee32a17979eaee8744e3ae319fbd118d08c956cec3076377780ee6cf68155
-
Filesize
342B
MD5a61a71f32f95c3e55e2f7bf30d128197
SHA174890eba007d6f4f201f9409eda06c4c94de03f6
SHA256ef5dcce172749643b34f073191c074a98c42135f0bc5d54397f8ebdff07c1186
SHA512c44c1f603dd0889b936ca0ebd232e6003989bcdb2c0dd9fda2fa6b6681b545e7382dad267994cd6bb66ffa82036d4c615fe1c4f418debb07944da1de6bf561ba
-
Filesize
8.6MB
MD5358e559fcafbccde45cc3e2619c4e5f5
SHA1cd4c343c61a4889494bfb0a0df621d2dfaa3d7d9
SHA256353bdf2f3fd6fecbb00b232acacbfd8c8b46c860774bd0634c64ab2a64153ff9
SHA5125a5368b545c58b66a6491d42b3c2dcefece38d46d89807fec5ef6521860dcc58bfff16d2106e14c079ea223554358256226bcb02b7dc13a554f2c68c4a693d06
-
Filesize
332KB
MD5d8431ef6877891a68521f2991a1b79d6
SHA1f8bf726e86734a656a919db5854a511bd3e60a80
SHA25661238d597dafb290ade204bd015abae4dd7803e1743f60c5d06b64b6e26d4aee
SHA5120c6e24438caff06c79ce41fc80c54bd753943b04b75fedff7329c56a92df55ad489bed58f16e4a825aed38f596c7f7f5d35c9aaff1ff361e1cc41be9b1bda99c
-
Filesize
266B
MD5c5c923f2d2abad344917cdc7533b28b0
SHA144ff9d310e658c8f7f07201b6febafd17b739475
SHA256db1977d8d538a3a4b8b9e223ea91fadabff88e73137bf7ec786a0cfc9771a53b
SHA5121b215d200fd183f3aed35d2e43ec0eef2d65793a41a1487e221bc7028dce9d0af2450fb636473a9f118ba25a3c21da51773161dcb3eb3f0cfe9dfc85e17cc194
-
Filesize
464B
MD5c2c3fa8f68f63b05a16db3f957ef8b2b
SHA109006b2cb99b8f12e346dc224573ff5713b372ab
SHA256ef598e5e4066eb0ed90966551687decff9543c0f4e77f580697a45063a3c7ac1
SHA51247757d4bf04cf5d8f35999db6ca4ec41d8a17eb3961e90ab17d2cae385eb79b8e597b2cafe22467410b8a124d468d45709cd47f7c68f034ddbe6d32ba6bae347
-
Filesize
5KB
MD51d0520b778bf4e17245577e92c9e41de
SHA154150c5bf16446041e62a12b3db38f8ec03517b6
SHA2565cb1bc919c6434a445fa118a013f1bf32045c04ec22681bf4f95f66a3d153e90
SHA51220c59abaa88631c04d562674ac5cc4a96eb87342f68554a967d576ee6462601c18079bf1fb590adcf9c8dedb9f17570bf250aa99f4760d75f2ce04eedde72d49
-
Filesize
1KB
MD5783ae648402ee7bccd1e82c29a3dd677
SHA1cdd08692bcc3740ff8824f30977c375356367aed
SHA256f65b5306f9ab900f96effc92c64fc7524f379f4f60df16bec3de810fea31149f
SHA512fd14ac181161ef305d992bbf31f7ae2d554ba97862c6d4523a0155552277230c6287697f8a4f7ea89e94b34e37bfe3ee7babb81f08e801c72646c52c49067646
-
Filesize
100KB
MD568c12e7316f64935de9ec0272961f757
SHA10da3cd6d842eebb561d1e590364fef38114244aa
SHA256865c8f9eb7d491652382386f8730f6e473ed56367ef69586c515da99c8277aca
SHA512f96c55c089404cc93d07303fe89935566c43999798280c2c2b588171906d2a63586b8923b53238ecaad11e78aabb899ce44538e87183410715b2e1ebecc893be
-
Filesize
117KB
MD583308894e330be5ec25702eef830866a
SHA1bdb842fe6ce97e044c4c6eb1f5bd50ca5ba4c09c
SHA2561b7f6b182f4c13d5b19fc80b12ec7489462dc54c7a7a9c7f9d5b8cc7cb09b3ef
SHA512f01ae2f56c775c6d56798f90c61fe33279f7b0a6d8e328cba3d39f7f97df34695ab8d2bf0d2039fd759b847c2c5ef988b5b21610f8e6bbc72759413f240df7e2
-
Filesize
60KB
MD5fc04c6e9cfc9b3b26f9db5acdc08018c
SHA1a955d41ffdae3d9859c38ab48f1a6fde251929e4
SHA256e6f7041a1721ce6909d4ebb33954ccd2196a61cf42f6e0896d9d9e3f3dfd711f
SHA51229b6e5c76db731bdc9e23c5028e28d0e0cc89c1fe14e96bedb431529bf006b1de5673907263f3d12b4ac03b935a04938365362b08633417ff221b6c6b751c428
-
Filesize
154KB
MD51b92ec4dd644730557f54462f5ad6778
SHA1c02b60418502feb5a7ee30ee1a487a30170bf541
SHA256a5c5be7aa7b532939313523bcbba0da816771558cdfa188741d7b867c02164fc
SHA5127e27a1d70925870fab472af66f13dda2f9ed1c2b8ef4d95225e311f3976b4ce44260b3ed44171f649fba9cae9e92bda2bbe6dafa7e1d06dfc165f6fe3d6fb528
-
Filesize
56KB
MD5f57a82702e39968d82dd6134f04f32f5
SHA1f5a4673645db6d5db7717d1a6a8e6e20e65e7abc
SHA256682bf0918483aed71123a22edef00881d5f4e6cf7b01f17cc975a7e08a79156d
SHA5125c20f53a39ab820c793540c647a40fe8035ab810e92ea2be38f34613a8696ed8c0ce1c0a2a1354a73f92341ae752b0d5b84be6db4f8b61a55b5b067986c65c48
-
Filesize
15KB
MD5c77bbfe01f59d19bd22981a9c912aef7
SHA16d5bea1594670fa80f5ad445933fddb97b1a5f54
SHA25687d8f85d4efad9cb701aa12994216064c1530425a0be1f008015177cea77ebd1
SHA51268b7c653fc2be1b473c002cc2a08ec9b6ca30329cb9e46ea12e7f58cf058db8d02a5e3ad579fefd666f54cb806d4e89c6ae1259c6edc1f1a9ad0c6b787c3bd64
-
Filesize
10KB
MD5ee67914f1990ce6c43ad964542317eb2
SHA1f7af37d817a0fd1018a44eca8c114ccc4e635204
SHA256433624a17ca0b5e0876468e0027f20dad54d07646c0ecf42e39b7ff6dc9b564f
SHA51237479d557d9f48183a2dd51b9944225984f1dccc24aa77f438c68746bf4a0aad490be2d2fbc2413efad1bae037d293e6c989da55142c31fc0295c70617afd8e5
-
Filesize
19KB
MD5ec30b5a3bc57502e337395b6a37fef13
SHA15fe14dbf434390aa8736db341181c8f282f4c049
SHA25639a2d430e3678adf975fd64c4cee37c9edc29cb433f39a7fbb7f6a7c22d06628
SHA512292a31f5d115392a71fdec5ee7423d9f4b3339003c32f4deb9ffd0a0352211805cb7e29c96fb3450d409e2cb9f090117e386dab8ca0153edb40711012170ef5d
-
Filesize
2KB
MD5f753b1633b8f5b9d894ff2186094fc37
SHA1e058e487ef9667692c15a7bb28b78df5617f4194
SHA2561956ab7884a9e5f0dcb1da7ec7f2ac786b5339f682b4b105e08e3723afc581de
SHA5125e60115e00ba73deb645c937aab4f0e3cbbb5a032f424c2b55e4afe99c8aabb41e6e5e25b3ec0c5c88c54779293301e22a8a448d4e4a05cb0227cfbc68ea71e2
-
Filesize
464KB
MD5bcccb9dcdc4dd82ffbc8866ddd605e91
SHA106c60240f9b2089145c674a6c9302da89dcf8777
SHA2567383ac872e329def2946547424c2e017f2b137a725609e537f252d5af739578b
SHA51242b7181b03dc5f4ec823131531f488c5349c7ba544fa5bf13d16f75a6151af0ea578af1e13d6ad2380f9437b36b67e2b14eb70bffa6eab3e9b5508e6cf4d1bfd
-
Filesize
100KB
MD502a598df1750e98b1c010ba2161088b0
SHA1bc96e814b8863b3ddcf1be7c94b9fbaf93a78eb9
SHA256bfb01a5006cfb5377a77e270b1374d9b228c579a8f2520553fdefcc0527ba7ed
SHA5125cd6352f98c3308b7e9ce9d3ad1eb3e31113ee8b0b7abce731d1636164f7975a13c4683a56c4e244fc2740e2045b622afe540a2f0e875ab5682c5a18f519a0de
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b
-
Filesize
67KB
MD57574cf2c64f35161ab1292e2f532aabf
SHA114ba3fa927a06224dfe587014299e834def4644f
SHA256de055a89de246e629a8694bde18af2b1605e4b9b493c7e4aef669dd67acf5085
SHA5124db19f2d8d5bc1c7bbb812d3fa9c43b80fa22140b346d2760f090b73aed8a5177edb4bddc647a6ebd5a2db8565be5a1a36a602b0d759e38540d9a584ba5896ab
-
Filesize
228KB
MD5afeada1c96da250c149a65078792fea9
SHA105edf45f6a100a72a5117910ad1fe910aae5c618
SHA256db5d3594ab06b3d458a1472959ba1f703e98104ba94fde6b953697fa83b0a601
SHA51270437bb78f950855c9b1d1597318755c58c8d4f430211aaa9d8829a49bcd11d993b3589cf1581e65ab7c1b40dd94a8b6f1706d9e5f55ee17bb021e2914ee33c3
-
Filesize
200KB
-
Filesize
1.2MB
-
Filesize
1.6MB
-
Filesize
1.4MB
-
Filesize
36KB
-
Filesize
1.1MB
-
Filesize
572KB
-
Filesize
112KB
-
Filesize
324KB
-
Filesize
12.3MB
-
Filesize
200KB
-
Filesize
940KB
-
Filesize
816KB
-
Filesize
180KB
-
Filesize
1.2MB
-
Filesize
180KB
-
Filesize
1.1MB
-
Filesize
816KB
-
Filesize
2.1MB
-
Filesize
1.1MB
-
Filesize
492KB
-
Filesize
572KB
-
Filesize
1.6MB
-
Filesize
348KB
-
Filesize
492KB
-
Filesize
640KB
-
Filesize
628KB
-
Filesize
3.1MB
-
Filesize
524KB
-
Filesize
200KB
-
Filesize
2.1MB
-
Filesize
324KB
-
Filesize
628KB
-
Filesize
324KB
-
Filesize
3.1MB
-
Filesize
524KB
-
Filesize
1.1MB
-
Filesize
816KB
-
Filesize
2.1MB
-
Filesize
36KB
-
Filesize
1.1MB
-
Filesize
1.6MB
-
Filesize
348KB
-
Filesize
640KB
-
Filesize
348KB
-
Filesize
3.1MB
-
Filesize
640KB
-
Filesize
1.2MB
-
Filesize
1.1MB
-
Filesize
180KB
-
Filesize
940KB
-
Filesize
200KB
-
Filesize
2.1MB
-
Filesize
1.1MB
-
Filesize
572KB
-
Filesize
12.3MB
-
Filesize
1.4MB
-
Filesize
324KB
-
Filesize
640KB
-
Filesize
348KB
-
Filesize
628KB
-
Filesize
3.1MB
-
Filesize
1.2MB
-
Filesize
524KB
-
Filesize
12KB
-
Filesize
192KB
-
Filesize
192KB