0ad71870f1a182251ab6bf079916a5f7cbc00f78980d95878487cfa7fa875eb3 | Triage

Sharing

General

Target

2024-10-02_0029236850d2d3a622ba77f5685fc7b3_icedid
Size

1.7MB
Sample

241002-pkfmdawaqn
MD5

0029236850d2d3a622ba77f5685fc7b3
SHA1

3415c793ab424a9312aa87894bee4bcc079e5ee2
SHA256

0ad71870f1a182251ab6bf079916a5f7cbc00f78980d95878487cfa7fa875eb3
SHA512

5db52ca51a36a426501a4626e37686f56cf4231dcd323003fba6866d7a5e645db61a3f284c468f1cd382f9ad78c1f1e0a04222c1894f4d5e34eeff1e3b710173
SSDEEP

49152:TsEzQYLxP2AXFRs6Hv8DzMwuA8uOpYJc1RniMy3U6+:IeQYLV2YF1k0FLuOpVRnh6

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  2024-10-02_0029236850d2d3a622ba77f5685fc7b3_icedid
- Size
  
  1.7MB
- MD5
  
  0029236850d2d3a622ba77f5685fc7b3
- SHA1
  
  3415c793ab424a9312aa87894bee4bcc079e5ee2
- SHA256
  
  0ad71870f1a182251ab6bf079916a5f7cbc00f78980d95878487cfa7fa875eb3
- SHA512
  
  5db52ca51a36a426501a4626e37686f56cf4231dcd323003fba6866d7a5e645db61a3f284c468f1cd382f9ad78c1f1e0a04222c1894f4d5e34eeff1e3b710173
- SSDEEP
  
  49152:TsEzQYLxP2AXFRs6Hv8DzMwuA8uOpYJc1RniMy3U6+:IeQYLV2YF1k0FLuOpVRnh6
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer