General
- Target 2026-09-10_61713f633c056402668bc6aaaa362d90_icedid_poet-rat
- Size 6.2MB
- Sample260910-tn15psdq6w
- SHA256 4fafc27eee9188b4b0224fbf776cb533ffad99cb94a75eb77cfb6c956cd9f1c1
- MD5 61713f633c056402668bc6aaaa362d90
- SHA1 73f9f783e173778fd02a28df5d17983684a089d0
- SHA512 bf92141bbdae3f5c626489680c0d8332a21286cabaebeee1fa88be396741a9dc3ba1cea683b4f6a40c904ed71506ebaac08185dde8cf9d2cb3d7ea70d22f5d79
- SSDEEP 98304:tc4gig8jnTYGQN+wSYx4vFfi5Y0u2jUOZEblnxyuPvAafm8CcLsFRMLtjN62:SinjnTH2PuFfi5o2FMlnfVsFP
- TLSH T1816601AEEA348D75F9BE7736BB280607DA202757411D056F36BC090C0F7EA991387693
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-10_61713f633c056402668bc6aaaa362d90_icedid_poet-rat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-10_61713f633c056402668bc6aaaa362d90_icedid_poet-rat.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_61713f633c056402668bc6aaaa362d90_icedid_poet-rat
- Size 6.2MB
- SHA256 4fafc27eee9188b4b0224fbf776cb533ffad99cb94a75eb77cfb6c956cd9f1c1
- MD5 61713f633c056402668bc6aaaa362d90
- SHA1 73f9f783e173778fd02a28df5d17983684a089d0
- SHA512 bf92141bbdae3f5c626489680c0d8332a21286cabaebeee1fa88be396741a9dc3ba1cea683b4f6a40c904ed71506ebaac08185dde8cf9d2cb3d7ea70d22f5d79
- SSDEEP 98304:tc4gig8jnTYGQN+wSYx4vFfi5Y0u2jUOZEblnxyuPvAafm8CcLsFRMLtjN62:SinjnTH2PuFfi5o2FMlnfVsFP
- TLSH T1816601AEEA348D75F9BE7736BB280607DA202757411D056F36BC090C0F7EA991387693
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing many IR and analysis tools
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE