Overview

overview

7

Static

static

3

2024-11-09...im.exe

windows7-x64

7

2024-11-09...im.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    2024-11-09_20c6ce65392f447425b6822b27bfd193_hijackloader_icedid_luca-stealer_nymaim
  • Size 1.7MB
  • Sample241109-e7apjaxglr
  • SHA256 581453fc694644ad1d09b5292f2bae9c55a0175c156b98dfe9c2469586a3d051
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
discoveryevasiontrojan

Malware Config

Targets

    • Target
      2024-11-09_20c6ce65392f447425b6822b27bfd193_hijackloader_icedid_luca-stealer_nymaim
    • Size 1.7MB
    • SHA256 581453fc694644ad1d09b5292f2bae9c55a0175c156b98dfe9c2469586a3d051
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10
    discoveryevasiontrojan

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks whether UAC is enabled

      evasiontrojan

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks