Analysis
-
max time kernel
93s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
21-11-2024 11:48
General
-
Target
2024-11-21_4e8538f93ba567b7b0f7c5d1aeec81e5_hacktools_icedid_luca-stealer.exe
-
Size
10.9MB
-
MD5
4e8538f93ba567b7b0f7c5d1aeec81e5
-
SHA1
a5f4523c58a62aca3af92763fb9d8a28c15ba339
-
SHA256
f90865eeb90abfac6e29cc3974a997edbf2c3ed2c24dfa31022f3a23fb7349c3
-
SHA512
70fb184df3a97914d4592f5ccd443490d4acdd63d72b72eba029c9b9868512fe9e5a6625041ac82be7d75a65ed05aaeb150712f38b0b86783ac22bf673863304
-
SSDEEP
98304:qqH9se10FB24C+1ogFfdopN0dPdqQLj/bA5ABWG4aZcTrM3uPoqZssHsa4xHTa0y:NCF/NfdiN0d/45A06BHG0pFAHqoY0
Score
6/10
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-11-21_4e8538f93ba567b7b0f7c5d1aeec81e5_hacktools_icedid_luca-stealer.exe"C:\Users\Admin\AppData\Local\Temp\2024-11-21_4e8538f93ba567b7b0f7c5d1aeec81e5_hacktools_icedid_luca-stealer.exe"1⤵
- Writes to the Master Boot Record (MBR)
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx