2024-06-11_8cddd0fe53a4276518a1cee532231d8e_icedid

Sharing

Copy URL Twitter E-mail

General

Target
2024-06-11_8cddd0fe53a4276518a1cee532231d8e_icedid
Size 16.7MB
Sample240612-aa691swenn
SHA256 2f758d0fe4c20b80368f56cecf4ab0b6de18844da47b5a4e9aa8ca2fa725a223
MD5 8cddd0fe53a4276518a1cee532231d8e
SHA1 9e35f9d32ac5eb36f7db1a4ca12b0f6caf544d00
SHA512 37158eac3f69af5339d9d57957309bf5f45af0b4ec272d0e7a48273db4f67a3de2066b1fcd90414a6386e9db397020b6c21d020c0cad0c005002db334bad5936
SSDEEP 393216:nlvBGFZjC0mmzdHfXi1G5SnvOXqlMpgDpn2a+jsxIDiY55:H2pCFEfi1G502cMq9l9xIGk
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

2024-06-11_8cddd0fe53a4276518a1cee532231d8e_icedid

.exe 16.7MB

2024-06-11_8cddd0fe53a4276518a1cee532231d8e_icedid

IMPHASH 95e5ae1ea3e44c6c1d6ceca6a279313a
SHA256 2f758d0fe4c20b80368f56cecf4ab0b6de18844da47b5a4e9aa8ca2fa725a223
MD5 8cddd0fe53a4276518a1cee532231d8e
SHA1 9e35f9d32ac5eb36f7db1a4ca12b0f6caf544d00
SHA512 37158eac3f69af5339d9d57957309bf5f45af0b4ec272d0e7a48273db4f67a3de2066b1fcd90414a6386e9db397020b6c21d020c0cad0c005002db334bad5936
SSDEEP 393216:nlvBGFZjC0mmzdHfXi1G5SnvOXqlMpgDpn2a+jsxIDiY55:H2pCFEfi1G502cMq9l9xIGk
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Digest

f4:8b:0e:52:26:29:c6:7f:c7:9e:df:3e:40:f1:6f:af:cd:5b:d9:4a:36:40:04:3b:41:bf:55:b8:f0:ef:3e:f7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Splashtop Inc.,O=Splashtop Inc.,L=San Jose,ST=California,C=US

Chains

Jun 10, 2024

CN=Splashtop Inc.,O=Splashtop Inc.,L=San Jose,ST=California,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=Splashtop Inc.,O=Splashtop Inc.,L=San Jose,ST=California,C=US

Serial Number

0c:7e:ec:c8:c5:e1:d1:fb:52:92:56:a2:d3:10:f0:71

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Nov 1, 2022 - Jan 7, 2025

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2013 - Jan 15, 2038

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Serial Number

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 3, 2023 - Aug 2, 2034

Minor OS version

Major OS version

Entry point

81387

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\slave\workspace\GIT_WIN_SRS_Formal\Source\irisserver\Release\SRUnPackSOS.pdb

kernel32

HeapFree ExitProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind RaiseException HeapReAlloc HeapSize GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree GetTickCount VirtualAlloc GetCPInfo HeapAlloc GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount LCMapStringW GetTimeFormatA GetDateFormatA GetTimeZoneInformation GetConsoleCP GetConsoleMode LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW GetProcessHeap CreateFileA SetEnvironmentVariableA GetStartupInfoW GlobalFlags WritePrivateProfileStringW SetErrorMode lstrlenA TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedIncrement InterlockedDecrement GetModuleHandleA GlobalFindAtomW CompareStringW LoadLibraryA GetVersionExA GlobalAddAtomW GlobalDeleteAtom GetCurrentThread ConvertDefaultLocale EnumResourceLanguagesW lstrcmpA GetLocaleInfoW LoadLibraryExW CompareStringA InterlockedExchange lstrcmpW GetFileTime GetFileSizeEx GetFileAttributesExW FileTimeToLocalFileTime FileTimeToSystemTime GetFullPathNameW GetVolumeInformationW DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer MoveFileW FormatMessageW FreeResource GlobalUnlock GlobalLock DeleteFileW DeviceIoControl FindClose QueryPerformanceCounter GlobalFree GlobalAlloc FindNextFileW GetFileAttributesW FindFirstFileW CreateDirectoryW GetWindowsDirectoryW GetSystemTimeAsFileTime GetVersionExW Process32NextW Process32FirstW CreateToolhelp32Snapshot WriteFile CreateProcessW GetCurrentProcess LocalFree SetLastError ReadFile CreateFileW GetModuleFileNameW GetModuleHandleW GetExitCodeProcess GetProcessId GetSystemWindowsDirectoryW TerminateProcess OpenProcess GetCurrentThreadId GetCommandLineW GetSystemDirectoryW SetDllDirectoryW GetLastError CreateMutexW MultiByteToWideChar GetDiskFreeSpaceExW RemoveDirectoryW SetCurrentDirectoryW Sleep GetTempPathW CreateThread WaitForSingleObject WideCharToMultiByte GetCurrentProcessId ProcessIdToSessionId lstrlenW OutputDebugStringW FreeLibrary GetProcAddress LoadLibraryW CloseHandle FindResourceW LoadResource LockResource SizeofResource GetACP GetPrivateProfileStringW

user32

UnregisterClassW DestroyMenu GetSysColorBrush MoveWindow SetWindowTextW GetDC ClientToScreen GrayStringW DrawTextExW DrawTextW TabbedTextOutW RegisterWindowMessageW WinHelpW GetCapture GetClassLongW SetPropW GetPropW RemovePropW GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints SetMenu CreateWindowExW GetClassInfoW RegisterClassW GetSysColor AdjustWindowRectEx ScreenToClient GetDlgCtrlID DefWindowProcW CallWindowProcW CopyRect GetMenu SetWindowLongW SetWindowPos SystemParametersInfoA IsIconic GetWindowLongW GetLastActivePopup IsWindowEnabled SetWindowsHookExW CallNextHookEx GetMessageW TranslateMessage DispatchMessageW GetActiveWindow GetKeyState PeekMessageW ValidateRect SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapW GetFocus GetParent ModifyMenuW EnableMenuItem CheckMenuItem PostQuitMessage CharUpperW GetMenuState GetMenuItemID GetMenuItemCount GetSubMenu EnableWindow GetCursorPos SetLayeredWindowAttributes RedrawWindow ReleaseDC SetWindowRgn GetClientRect SetTimer PostMessageW KillTimer DisableProcessWindowsGhosting SendMessageW LoadIconW SystemParametersInfoW PtInRect GetWindowRect GetWindowPlacement GetWindow LoadCursorW SetCursor GetClassNameW IsWindowVisible GetWindowTextW SetForegroundWindow AttachThreadInput GetWindowThreadProcessId GetForegroundWindow SwitchToThisWindow ShowWindow IsWindow FindWindowW GetSystemMetrics MessageBoxW GetClassInfoExW

gdi32

GetStockObject DeleteDC ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutW TextOutW RectVisible PtVisible CreateRoundRectRgn DeleteObject SetMapMode RestoreDC SaveDC SetBkColor SetTextColor GetClipBox CreateBitmap GetDeviceCaps BitBlt CreateCompatibleBitmap CreateCompatibleDC

comdlg32

GetFileTitleW

advapi32

RegQueryValueW RegOpenKeyW CreateWellKnownSid CreateProcessAsUserW OpenProcessToken DuplicateTokenEx DuplicateToken CheckTokenMembership GetTokenInformation RegSetValueExW RegEnumKeyW RegQueryValueExW RegDeleteValueW RegOpenKeyExW RegDeleteKeyW RegFlushKey RegCreateKeyExW RegCloseKey RegOpenCurrentUser RevertToSelf ImpersonateLoggedOnUser

shell32

SHGetFolderPathW ShellExecuteExW SHFileOperationW SHCreateDirectoryExW

shlwapi

PathAppendW PathFileExistsW PathStripToRootW PathIsUNCW PathFindFileNameW PathFindExtensionW

ole32

CreateStreamOnHGlobal

oleaut32

VariantInit VariantClear VariantChangeType

gdiplus

GdipDeleteFontFamily GdipLoadImageFromStreamICM GdipLoadImageFromStream GdipDisposeImage GdipCloneImage GdipGetImageWidth GdipGetImageHeight GdipDrawImageRectI GdipDeleteGraphics GdipCreateFromHDC GdiplusShutdown GdipFree GdipAlloc GdiplusStartup

Sharing

General

Malware Config

Signatures

File Explorer

2024-06-11_8cddd0fe53a4276518a1cee532231d8e_icedid

kernel32

user32

gdi32

comdlg32

advapi32

shell32

shlwapi

ole32

oleaut32

gdiplus

generic