Overview

overview

10

Static

static

10

2024-07-01...id.exe

windows7-x64

9

2024-07-01...id.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-07-01_78e50f076371baf3cb8cf6ef60af9141_icedid

  • Size

    4.6MB

  • Sample

    240701-hn34hsydlf

  • MD5

    78e50f076371baf3cb8cf6ef60af9141

  • SHA1

    ec793e5224b07c0c761aefb2c994548ac594336f

  • SHA256

    5fbb047b896af9e769333b5382127f194330dd0b446ecc38cd7d2543ff3083b8

  • SHA512

    4c8aa6f7a18094f2763aeeef79abb1bd005f87e54e46ef330d467cc7710b3778558c238cc96d9ca24fba938b21e813d0806a507ecc7d8b9ab2332822992378a1

  • SSDEEP

    49152:Keo765v/Q3R8K1S5SpBFXkVaW4mFJ+jOTpRrn4YVxxfVXmdY9rThHhAyGWv4uAbL:M65nLK2S7NkVafoEjOTphn4YVDkeFG04

Score
10/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      2024-07-01_78e50f076371baf3cb8cf6ef60af9141_icedid

    • Size

      4.6MB

    • MD5

      78e50f076371baf3cb8cf6ef60af9141

    • SHA1

      ec793e5224b07c0c761aefb2c994548ac594336f

    • SHA256

      5fbb047b896af9e769333b5382127f194330dd0b446ecc38cd7d2543ff3083b8

    • SHA512

      4c8aa6f7a18094f2763aeeef79abb1bd005f87e54e46ef330d467cc7710b3778558c238cc96d9ca24fba938b21e813d0806a507ecc7d8b9ab2332822992378a1

    • SSDEEP

      49152:Keo765v/Q3R8K1S5SpBFXkVaW4mFJ+jOTpRrn4YVxxfVXmdY9rThHhAyGWv4uAbL:M65nLK2S7NkVafoEjOTphn4YVDkeFG04

    Score
    9/10
    bootkitpersistenceupx

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Privilege Escalation

Defense Evasion

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks