General

  • Target

    2024-08-29_72fd43ea37451843ccf0a41d8935b617_icedid

  • Size

    1.2MB

  • Sample

    240829-kmlh7asdke

  • MD5

    72fd43ea37451843ccf0a41d8935b617

  • SHA1

    3540f3109466a1f8a146dc0ccd8bba4369922469

  • SHA256

    d069eea216749d838bc6a729891e2746ffcc6bc12f1f0ac227af688e31c40c3b

  • SHA512

    f550f78b291ce97ceef7037b1ca95d0f2035e23bd422a14d8102913d61c4a0aa00ad12e6640f70be81f789d1a3a7d9df5b76e305de785ae3d608ba03c6d81387

  • SSDEEP

    24576:aW0vw5in8C2YVTWb4jfLOL64iKhB764qdoO59vA10mcBrdWG/vD:aW0vabC2Uo4zLeiiZEo10dBxW

Malware Config

Targets

    • Target

      2024-08-29_72fd43ea37451843ccf0a41d8935b617_icedid

    • Size

      1.2MB

    • MD5

      72fd43ea37451843ccf0a41d8935b617

    • SHA1

      3540f3109466a1f8a146dc0ccd8bba4369922469

    • SHA256

      d069eea216749d838bc6a729891e2746ffcc6bc12f1f0ac227af688e31c40c3b

    • SHA512

      f550f78b291ce97ceef7037b1ca95d0f2035e23bd422a14d8102913d61c4a0aa00ad12e6640f70be81f789d1a3a7d9df5b76e305de785ae3d608ba03c6d81387

    • SSDEEP

      24576:aW0vw5in8C2YVTWb4jfLOL64iKhB764qdoO59vA10mcBrdWG/vD:aW0vabC2Uo4zLeiiZEo10dBxW

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks