General
-
Target
2025-01-23_cad1f7b3a5e2e74d582718aae465f172_icedid_luca-stealer_wapomi
-
Size
1.7MB
-
Sample
250123-yjd7lasnfm
-
MD5
cad1f7b3a5e2e74d582718aae465f172
-
SHA1
17a8d4ad759d2ef1f9c539c7051645befb8112f2
-
SHA256
24b700d2f37b2fb2c2ba89bfa55b8488560cac17f6ab45e4adecac020c05c285
-
SHA512
858136e351c718e67f51bbb256973ac428c849926b95ec4d8d2307c2a0c124b9a11435e8f33e48989dd0083ab609e2e65966365877382d5d1fd3153bcb0d1781
-
SSDEEP
24576:MzEhq7H0IsKdyLkGhrg105b4YFrvKDdSZGML02vhSMXlohTnma0J1Z:MyqeKdW1u1M6dSZGOnSnma0J1
Static task
static1
Behavioral task
behavioral1
Sample
2025-01-23_cad1f7b3a5e2e74d582718aae465f172_icedid_luca-stealer_wapomi.exe
Resource
win7-20240903-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
2025-01-23_cad1f7b3a5e2e74d582718aae465f172_icedid_luca-stealer_wapomi
-
Size
1.7MB
-
MD5
cad1f7b3a5e2e74d582718aae465f172
-
SHA1
17a8d4ad759d2ef1f9c539c7051645befb8112f2
-
SHA256
24b700d2f37b2fb2c2ba89bfa55b8488560cac17f6ab45e4adecac020c05c285
-
SHA512
858136e351c718e67f51bbb256973ac428c849926b95ec4d8d2307c2a0c124b9a11435e8f33e48989dd0083ab609e2e65966365877382d5d1fd3153bcb0d1781
-
SSDEEP
24576:MzEhq7H0IsKdyLkGhrg105b4YFrvKDdSZGML02vhSMXlohTnma0J1Z:MyqeKdW1u1M6dSZGOnSnma0J1
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-