Overview

overview

9

Static

static

1

2024-06-16...id.exe

windows7-x64

9

2024-06-16...id.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-06-16_1332acdfb1316d4c74bc40f9f4f56887_floxif_icedid

  • Size

    261KB

  • Sample

    240616-2l4f2swamq

  • MD5

    1332acdfb1316d4c74bc40f9f4f56887

  • SHA1

    0ce161e984009a6be2f8aef21eda9f6376e65027

  • SHA256

    65dc16cef8c0178e079092af793dfd2a63758bc5db29e89aab8e89afba1accc9

  • SHA512

    859d5103d2a66427ba8a546cbfc43543c4254ef487cf303007244e15ed8ca1e1eb8eb45eadcf52a9afdfbcfe96b9f22671cf2045bc9cb9184afe8d7be2849717

  • SSDEEP

    6144:88dD0+IRRgqNKfCcK2x5EVBV+UdvrEFp7hKXo:88dg+IRRgqAfu2xcBjvrEH7n

Score
9/10
persistenceupx

Malware Config

Targets

    • Target

      2024-06-16_1332acdfb1316d4c74bc40f9f4f56887_floxif_icedid

    • Size

      261KB

    • MD5

      1332acdfb1316d4c74bc40f9f4f56887

    • SHA1

      0ce161e984009a6be2f8aef21eda9f6376e65027

    • SHA256

      65dc16cef8c0178e079092af793dfd2a63758bc5db29e89aab8e89afba1accc9

    • SHA512

      859d5103d2a66427ba8a546cbfc43543c4254ef487cf303007244e15ed8ca1e1eb8eb45eadcf52a9afdfbcfe96b9f22671cf2045bc9cb9184afe8d7be2849717

    • SSDEEP

      6144:88dD0+IRRgqNKfCcK2x5EVBV+UdvrEFp7hKXo:88dg+IRRgqAfu2xcBjvrEH7n

    Score
    9/10
    persistenceupx

    • UPX dump on OEP (original entry point)

    • Modifies AppInit DLL entries

      persistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks