97a805db94669fbac36976216c5f99112706c45e8c7567b582ff7d75f27a784a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-07-25_59f7525059472a15083a15b703ab50ba_icedid
Size

440KB
Sample

240725-vyh8batelq
MD5

59f7525059472a15083a15b703ab50ba
SHA1

7749e0ff9ec5b9eb85555ab73db7566ff76f8431
SHA256

97a805db94669fbac36976216c5f99112706c45e8c7567b582ff7d75f27a784a
SHA512

48a641bbe9deae2b36370628b2896ab9146d887950cd971683980df96cf93c36a720c050d51062d43f30ecef1236e16f207d4298544c1dbee336caa14eb8c88f
SSDEEP

12288:JHhftsvpSfCludXukNtI0hslOYlTMLW9l4h19Tzk4:JHySxd+k/hWTl439T3

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-07-25_59f7525059472a15083a15b703ab50ba_icedid
- Size
  
  440KB
- MD5
  
  59f7525059472a15083a15b703ab50ba
- SHA1
  
  7749e0ff9ec5b9eb85555ab73db7566ff76f8431
- SHA256
  
  97a805db94669fbac36976216c5f99112706c45e8c7567b582ff7d75f27a784a
- SHA512
  
  48a641bbe9deae2b36370628b2896ab9146d887950cd971683980df96cf93c36a720c050d51062d43f30ecef1236e16f207d4298544c1dbee336caa14eb8c88f
- SSDEEP
  
  12288:JHhftsvpSfCludXukNtI0hslOYlTMLW9l4h19Tzk4:JHySxd+k/hWTl439T3
Score

7^/10

discovery
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2