c073bb45be53831ac1c500b05464e36bb9f3ebb4ae02a50ea1547c4c9620ba5e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-07-26_cfe9829cfd7ad107179a9c4002a3b28e_icedid
Size

440KB
Sample

240726-npdg5syera
MD5

cfe9829cfd7ad107179a9c4002a3b28e
SHA1

348e14a80ba35d6b5fd4d6eabd6b224003c96f6e
SHA256

c073bb45be53831ac1c500b05464e36bb9f3ebb4ae02a50ea1547c4c9620ba5e
SHA512

93fa03874f3ce2b99a00202ebb756eb6e257f6ed8c811e93502e50821ec78d0a8fff274ba70bc86fd4a47d450cf91f14b11d68b578a75215aeac8e549b3b3e57
SSDEEP

12288:JHhftsvpSfCludXukNtI0hslOYlTMLW9l4h19Tzk6:JHySxd+k/hWTl439Tt

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-07-26_cfe9829cfd7ad107179a9c4002a3b28e_icedid
- Size
  
  440KB
- MD5
  
  cfe9829cfd7ad107179a9c4002a3b28e
- SHA1
  
  348e14a80ba35d6b5fd4d6eabd6b224003c96f6e
- SHA256
  
  c073bb45be53831ac1c500b05464e36bb9f3ebb4ae02a50ea1547c4c9620ba5e
- SHA512
  
  93fa03874f3ce2b99a00202ebb756eb6e257f6ed8c811e93502e50821ec78d0a8fff274ba70bc86fd4a47d450cf91f14b11d68b578a75215aeac8e549b3b3e57
- SSDEEP
  
  12288:JHhftsvpSfCludXukNtI0hslOYlTMLW9l4h19Tzk6:JHySxd+k/hWTl439Tt
Score

7^/10

discovery
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2