Overview

overview

7

Static

static

3

2024-11-20...id.exe

windows7-x64

7

2024-11-20...id.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-11-20_95294958d03b45f0135df2fb5a69c529_icedid

  • Size

    7.2MB

  • Sample

    241120-q23c5syamj

  • MD5

    95294958d03b45f0135df2fb5a69c529

  • SHA1

    5f34f6a1c75b9520c59133d98ce0fd3e9aee551a

  • SHA256

    303633ae3882cc6bd0b78637b95d548c1d2272c73f8cd1a8b8341d82a11b7738

  • SHA512

    45801925bb90347a1d93d1c49a41b5cae0850bab096ccd48addad945917a6b27faae6117701ed52366c8f3f7b49d7cbf1796170a628db94c649dd5c79e758657

  • SSDEEP

    196608:AnNRTeF+yb6MScdupooKKpqsSCGg57VdB4JJbGsj:weF9+Tp33wn87+bHj

Score
7/10
discoveryvmprotect

Malware Config

Targets

    • Target

      2024-11-20_95294958d03b45f0135df2fb5a69c529_icedid

    • Size

      7.2MB

    • MD5

      95294958d03b45f0135df2fb5a69c529

    • SHA1

      5f34f6a1c75b9520c59133d98ce0fd3e9aee551a

    • SHA256

      303633ae3882cc6bd0b78637b95d548c1d2272c73f8cd1a8b8341d82a11b7738

    • SHA512

      45801925bb90347a1d93d1c49a41b5cae0850bab096ccd48addad945917a6b27faae6117701ed52366c8f3f7b49d7cbf1796170a628db94c649dd5c79e758657

    • SSDEEP

      196608:AnNRTeF+yb6MScdupooKKpqsSCGg57VdB4JJbGsj:weF9+Tp33wn87+bHj

    Score
    7/10
    discoveryvmprotect

    • Executes dropped EXE

    • Loads dropped DLL

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks