Overview

overview

7

Static

static

3

2024-10-02...id.exe

windows7-x64

7

2024-10-02...id.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-10-02_d868fd115dbc4f2d359a0acb009f4237_icedid

  • Size

    639KB

  • Sample

    241002-bxlghathpc

  • MD5

    d868fd115dbc4f2d359a0acb009f4237

  • SHA1

    0117f43c44de4c0748dc1c754abdd6c3b7aa274e

  • SHA256

    74fa3f922c9396129ab09581e8ea82313e5767be80ea40bc8fd59841ef05c4a1

  • SHA512

    58955cbcf4decd32825c2a62d82e5a65f04c5d62096b7e051d987969fad23e587676b32b859a15d753dc5984f189e7bca3fc2775b3df782207338ee9a1beafc2

  • SSDEEP

    12288:/WBasotvO7uknSY7J1o3xIamffkReBiNo+L7NSDAkiOolkY:eBasowSg1ohSkROMo+f1kZolj

Score
7/10
defense_evasiondiscoverypersistence

Malware Config

Targets

    • Target

      2024-10-02_d868fd115dbc4f2d359a0acb009f4237_icedid

    • Size

      639KB

    • MD5

      d868fd115dbc4f2d359a0acb009f4237

    • SHA1

      0117f43c44de4c0748dc1c754abdd6c3b7aa274e

    • SHA256

      74fa3f922c9396129ab09581e8ea82313e5767be80ea40bc8fd59841ef05c4a1

    • SHA512

      58955cbcf4decd32825c2a62d82e5a65f04c5d62096b7e051d987969fad23e587676b32b859a15d753dc5984f189e7bca3fc2775b3df782207338ee9a1beafc2

    • SSDEEP

      12288:/WBasotvO7uknSY7J1o3xIamffkReBiNo+L7NSDAkiOolkY:eBasowSg1ohSkROMo+f1kZolj

    Score
    7/10
    defense_evasiondiscoverypersistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

      defense_evasion

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks