Overview

overview

7

Static

static

1

2024-09-01...id.exe

windows7-x64

6

2024-09-01...id.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-09-01_d78e9eda6a02bbc7b70c486f580ea1d0_icedid

  • Size

    3.2MB

  • Sample

    240901-l38t4ayard

  • MD5

    d78e9eda6a02bbc7b70c486f580ea1d0

  • SHA1

    abeab8d9b12ceabf0218f4cb40471a8c2bcc222e

  • SHA256

    7e3668a661a181b5813a09672c6c8986b4f707051a9c68df19a67d36bc453945

  • SHA512

    9c5ef693ae064b250ebcdb649d693812660bd79e7c931ba23077d0520c1af9f820b477741b6829d71f994a81a46c8ed51e664c70a16a893ce5c4d62e2fed25c8

  • SSDEEP

    49152:f4vJ6j6m0ftAOWSprlytikuarizL1AvPFh414+wuc:f4vYjgfnWGlytikuTzL1AvPFAuh

Score
7/10
adwarediscoveryevasionpersistencestealertrojan

Malware Config

Targets

    • Target

      2024-09-01_d78e9eda6a02bbc7b70c486f580ea1d0_icedid

    • Size

      3.2MB

    • MD5

      d78e9eda6a02bbc7b70c486f580ea1d0

    • SHA1

      abeab8d9b12ceabf0218f4cb40471a8c2bcc222e

    • SHA256

      7e3668a661a181b5813a09672c6c8986b4f707051a9c68df19a67d36bc453945

    • SHA512

      9c5ef693ae064b250ebcdb649d693812660bd79e7c931ba23077d0520c1af9f820b477741b6829d71f994a81a46c8ed51e664c70a16a893ce5c4d62e2fed25c8

    • SSDEEP

      49152:f4vJ6j6m0ftAOWSprlytikuarizL1AvPFh414+wuc:f4vYjgfnWGlytikuTzL1AvPFAuh

    Score
    7/10
    adwarediscoveryevasionpersistencestealertrojan

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence

    • Checks whether UAC is enabled

      evasiontrojan

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks