General
-
Target
2024-07-30_4092a97870ed395fd49fc5de923ddafe_floxif_icedid
-
Size
6.4MB
-
Sample
240730-asnkmashme
-
MD5
4092a97870ed395fd49fc5de923ddafe
-
SHA1
32d671fdf9041aca98e38117f7e7b27a71aa1308
-
SHA256
2dcc8f3a54d084a9bb96f1cfcab1984441ff55ddf72b8db80443a71512706ce0
-
SHA512
f1cb5e909c8ede3941b1eb43c52390d4060a2e4297270d4826451693e78586dac65e9642d70dd75c3b08a59f89cc247ad0367c3e7709bf2584519c7e5723fb4d
-
SSDEEP
98304:7acgWC6MbNe3tx5H4FmNpLXU33EBqMUBB2Z6YfCuB0iSwgqdN5GAg:KlpIx5HzNpTtBGT46YfCuB0bwfN5GAg
Static task
static1
Behavioral task
behavioral1
Sample
2024-07-30_4092a97870ed395fd49fc5de923ddafe_floxif_icedid.exe
Resource
win7-20240708-en
Malware Config
Targets
-
-
Target
2024-07-30_4092a97870ed395fd49fc5de923ddafe_floxif_icedid
-
Size
6.4MB
-
MD5
4092a97870ed395fd49fc5de923ddafe
-
SHA1
32d671fdf9041aca98e38117f7e7b27a71aa1308
-
SHA256
2dcc8f3a54d084a9bb96f1cfcab1984441ff55ddf72b8db80443a71512706ce0
-
SHA512
f1cb5e909c8ede3941b1eb43c52390d4060a2e4297270d4826451693e78586dac65e9642d70dd75c3b08a59f89cc247ad0367c3e7709bf2584519c7e5723fb4d
-
SSDEEP
98304:7acgWC6MbNe3tx5H4FmNpLXU33EBqMUBB2Z6YfCuB0iSwgqdN5GAg:KlpIx5HzNpTtBGT46YfCuB0bwfN5GAg
-
Detects Floxif payload
-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-