Overview

overview

10

Static

static

10

2024-06-29...id.exe

windows7-x64

9

2024-06-29...id.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-06-29_7c7e490dd055d4b1a9c200d2203be31d_icedid

  • Size

    8.8MB

  • MD5

    7c7e490dd055d4b1a9c200d2203be31d

  • SHA1

    0e211d10f1cd9407e9585890271d921fd3b0159f

  • SHA256

    83f55cfaf4076b74842bd75ecfc70d4a383aa4b396d85fbdb71812845827db29

  • SHA512

    9b73d795035680f944dfa63f8173803dbd32b9029ddd5dc51c32098ddaa4a23efabe65895592aca3f65ed631443e61116cc90101daa3273d3f1ae66aaf7b0755

  • SSDEEP

    98304:Yqzc68TpwMmtw7jGfU5RZTs96wMrgDBJF4ghsqry116Zlh8QZcVzArOSqeDalc6q:KpMtw7PTs97sn16Xh72c9BDalVC

Score
10/10
agilenet

Malware Config

Signatures

  • Detects executables packed with Agile.NET / CliSecure 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • Obfuscated with Agile.Net obfuscator 1 IoCs

    Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

    agilenet
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-29_7c7e490dd055d4b1a9c200d2203be31d_icedid
    .exe windows:4 windows x86 arch:x86

    69a370217ac9a133e4eb3ee2e9ad2577


    Headers

    Imports

    Exports

    Sections