Overview

overview

7

Static

static

3

2024-09-02...id.exe

windows7-x64

7

2024-09-02...id.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-09-02_a82bf747db7d77ef5243eae4935aeb1a_hacktools_icedid

  • Size

    5.8MB

  • Sample

    240902-nm7yzaygrq

  • MD5

    a82bf747db7d77ef5243eae4935aeb1a

  • SHA1

    6381c019c97ccf23b2db5ee4c2ba8fcff3a671d1

  • SHA256

    64bf28187032053ecfaf1d25d0a66fbb1fe995fa8095a4f428acbda627c68cd3

  • SHA512

    3ffe422d2e8e9edce90031dd14f3d1c3cff5e956b565bfb71e591f016b0ccbcfdab22112fa6b9f89672c6c0740cef4351e04a40e90d452326e91e9a1b463cb8b

  • SSDEEP

    98304:Ud6RAG3iQ8op+ezwWwNIyTQbMGLd51YkPu4cJMGBj4DhDZANxBYtsQ:pHL8opj2TMM0LNPy8DpZ+C2Q

Score
7/10
bootkitdiscoverypersistenceupx

Malware Config

Targets

    • Target

      2024-09-02_a82bf747db7d77ef5243eae4935aeb1a_hacktools_icedid

    • Size

      5.8MB

    • MD5

      a82bf747db7d77ef5243eae4935aeb1a

    • SHA1

      6381c019c97ccf23b2db5ee4c2ba8fcff3a671d1

    • SHA256

      64bf28187032053ecfaf1d25d0a66fbb1fe995fa8095a4f428acbda627c68cd3

    • SHA512

      3ffe422d2e8e9edce90031dd14f3d1c3cff5e956b565bfb71e591f016b0ccbcfdab22112fa6b9f89672c6c0740cef4351e04a40e90d452326e91e9a1b463cb8b

    • SSDEEP

      98304:Ud6RAG3iQ8op+ezwWwNIyTQbMGLd51YkPu4cJMGBj4DhDZANxBYtsQ:pHL8opj2TMM0LNPy8DpZ+C2Q

    Score
    7/10
    bootkitdiscoverypersistenceupx

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks