2b022f709eb1036f2f0bf4868e7ea560ef7b361803e9e62cb36ffc6b99615876 | Triage

Sharing

General

Target

2024-09-04_294768cabb3f9f936079cf98176d6cc4_icedid
Size

10.3MB
Sample

240904-dqx8tstgpp
MD5

294768cabb3f9f936079cf98176d6cc4
SHA1

95c163247f6e982db98eb30af6df47bad8c57b1f
SHA256

2b022f709eb1036f2f0bf4868e7ea560ef7b361803e9e62cb36ffc6b99615876
SHA512

a04179fbc6e1b79dc117db1ae4da05ea686b9f63d528a51c3416ecf92edbbd5e9d098c1f1fe1274ae8e6bcf240ed8f8995a86c4d1c71d5387126e68def97c736
SSDEEP

196608:r0pMQB8XYqsBmiFm4CTqfG+vTiwnDmNQkJM8uDIYnKOI7N:rcMQB8XD4F3e+biSDcQwM8uDuB

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-04_294768cabb3f9f936079cf98176d6cc4_icedid
- Size
  
  10.3MB
- MD5
  
  294768cabb3f9f936079cf98176d6cc4
- SHA1
  
  95c163247f6e982db98eb30af6df47bad8c57b1f
- SHA256
  
  2b022f709eb1036f2f0bf4868e7ea560ef7b361803e9e62cb36ffc6b99615876
- SHA512
  
  a04179fbc6e1b79dc117db1ae4da05ea686b9f63d528a51c3416ecf92edbbd5e9d098c1f1fe1274ae8e6bcf240ed8f8995a86c4d1c71d5387126e68def97c736
- SSDEEP
  
  196608:r0pMQB8XYqsBmiFm4CTqfG+vTiwnDmNQkJM8uDIYnKOI7N:rcMQB8XD4F3e+biSDcQwM8uDuB
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2