Overview

overview

7

Static

static

3

2024-09-13...id.exe

windows7-x64

7

2024-09-13...id.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-09-13_ad623adf40cb2f8245736f2ee3473ca8_hacktools_icedid

  • Size

    10.4MB

  • Sample

    240913-dm86xs1cnj

  • MD5

    ad623adf40cb2f8245736f2ee3473ca8

  • SHA1

    be93c64b10ba25dfe41cab6402cb99b384e15c6a

  • SHA256

    9a454c67ceb0bf41fbf40afc8573550d7811e2027b64de6003fb9f43a453fcdf

  • SHA512

    47a99d7682bf6c8d92c5732db9f62809281afcb06756d0291d94d1e158ae16d9df11fd818db400c01455a772d7e4dd4683e5e6443b039cb375cd0d2c2fab466a

  • SSDEEP

    196608:DQC0oPl2/QfVFfbg9LcSUse1vEoaWhE//bit22JVjc9BDals:DQClVFfbyLXUse1XLm//bd2Tc9sa

Score
7/10
bootkitdiscoverypersistenceupx

Malware Config

Targets

    • Target

      2024-09-13_ad623adf40cb2f8245736f2ee3473ca8_hacktools_icedid

    • Size

      10.4MB

    • MD5

      ad623adf40cb2f8245736f2ee3473ca8

    • SHA1

      be93c64b10ba25dfe41cab6402cb99b384e15c6a

    • SHA256

      9a454c67ceb0bf41fbf40afc8573550d7811e2027b64de6003fb9f43a453fcdf

    • SHA512

      47a99d7682bf6c8d92c5732db9f62809281afcb06756d0291d94d1e158ae16d9df11fd818db400c01455a772d7e4dd4683e5e6443b039cb375cd0d2c2fab466a

    • SSDEEP

      196608:DQC0oPl2/QfVFfbg9LcSUse1vEoaWhE//bit22JVjc9BDals:DQClVFfbyLXUse1XLm//bd2Tc9sa

    Score
    7/10
    bootkitdiscoverypersistenceupx

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks