98bb4d3774243f4301afb9f7863320de1a1f6d6493f7f5060b289293938ab589 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-08_5d7d29a9fa6013a318893206373fb1f4_hacktools_icedid
Size

2.5MB
Sample

240908-21xbaazdjj
MD5

5d7d29a9fa6013a318893206373fb1f4
SHA1

30b92e33589d602a765c5e20cb867a2758f0ea82
SHA256

98bb4d3774243f4301afb9f7863320de1a1f6d6493f7f5060b289293938ab589
SHA512

93ba61a1fa111ad3fa17bcc09b567442567cdf85f2aee16701d067496710331f4f0d26bc0d3e6babdbf3cd2fcdafc550e060aa5815a24701cde20dcf60114114
SSDEEP

49152:XmvdgqxpQzgXQ3TooLeYN/yKiZ3pWBST1W5KiZBa:IZpQzgXgkoLpN/yKO8OW5KOo

Score

7^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  2024-09-08_5d7d29a9fa6013a318893206373fb1f4_hacktools_icedid
- Size
  
  2.5MB
- MD5
  
  5d7d29a9fa6013a318893206373fb1f4
- SHA1
  
  30b92e33589d602a765c5e20cb867a2758f0ea82
- SHA256
  
  98bb4d3774243f4301afb9f7863320de1a1f6d6493f7f5060b289293938ab589
- SHA512
  
  93ba61a1fa111ad3fa17bcc09b567442567cdf85f2aee16701d067496710331f4f0d26bc0d3e6babdbf3cd2fcdafc550e060aa5815a24701cde20dcf60114114
- SSDEEP
  
  49152:XmvdgqxpQzgXQ3TooLeYN/yKiZ3pWBST1W5KiZBa:IZpQzgXgkoLpN/yKO8OW5KOo
Score

7^/10

discovery persistence privilege_escalation
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation