🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 3c3024e4c2b075b12063e4af1bb3886d4e7ee25e8d1bb4fc52ea51535ab1e1ae. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


IcedID


Vendor detections: 4


Intelligence 4 IOCs YARA 1 File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 3c3024e4c2b075b12063e4af1bb3886d4e7ee25e8d1bb4fc52ea51535ab1e1ae
SHA3-384 hash: fa6360e75f89b5b08f5ccdf64bbc57925ec0defdf0de3029102be13e9f98a721b9c4be9dbf2e158e9db8a19c94312198
SHA1 hash: 8ff38fa6f072d07f9d767f991d9cc57c59030ada
MD5 hash: 0eba555b92d3fe517381d13207015089
humanhash: lion-finch-gee-california
File name:3c3024e4c2b075b12063e4af1bb3886d4e7ee25e8d1bb4fc52ea51535ab1e1ae
Download: download sample
Signature IcedID
Create hunting rule
File size:66'914 bytes
First seen:2021-09-29 08:10:21 UTC
Last seen:Never
File type:unknown
MIME type:application/octet-stream
imphash e0a50dc3fd59f4d700df0d8bd00d3fe2 (1 x IcedID)
ssdeep 1536:SDNz2EdUapfw5SS0ZNjEVwzo/TgPMSMWr9C2:SDNDdUa111ZZEkoLgPtMr2
Threatray 5'736 similar samples on MalwareBazaar
TLSH T183634C5FB3451772D78203B2370FADC6BB2A9475327A88D0546D805E232AE68D3FB395
Reporter JAMESWT_WT
Tags:IcedID

Intelligence

File Origin
# of uploads :
1
# of downloads :
400
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Win.Dropper.IcedID-7049581-0
Create hunting rule

Win.Dropper.IcedID-7049579-1
Create hunting rule

Detection:
icedid
Create hunting rule
Link:
https://mwdb.cert.pl/sample/3c3024e4c2b075b12063e4af1bb3886d4e7ee25e8d1bb4fc52ea51535ab1e1ae/
Threat name:
Win32.Trojan.IcedID
Create hunting rule
Status:
Malicious
First seen:
2021-09-27 18:54:00 UTC
AV detection:
36 of 45 (80.00%)
Threat level:
  5/5
Verdict:
malicious
Label(s):
icedid
Create hunting rule
Similar samples:
064cad19bee4580a82bc4ee3558e8510100ebba8da83720749f553cc411d5cb3
IcedID
41d1addb382678e81ab59cb80613f2c2ee746b2615233674cc8c323a9a0eff4c
IcedID
41db78fad794ca70ba68d9225112a0a8f6d50799effca89a88736e3df0c925ae
IcedID
6f0f5ac2a08c4746186a79f3afe48a614b1ed180ce830058805354bfa8cb1e8e
IcedID
6f8fc539952555b057adf7810aca782a29f8f624e1d46a0f4732db3763130725
IcedID
721bf1dd5787108ecf31dd3bbab5e355ca55bdc68eb2358ce891290a7ce2048c
IcedID
83923b2bb65492892ef63d18dff00654431b27cd409d8fd67d4ba0eadc052c6a
IcedID
b89ab9559b9f53fa5cd8ca76918902e1be2c3b749d755566ca784ea7ffa48fc3
IcedID
d98fd8189273e4f4fcbb8b1d5b32459b5d7adcd6eaff9efef0c32ace0fdfab0e
IcedID
ea0fb0dc663dcb83869c83db63565e8e69a1caac665f789a58b1c98b7ecd64e0
IcedID
+ 5'726 additional samples on MalwareBazaar
Verdict:
Malicious
Link:
https://www.vmray.com/analyses/3c3024e4c2b0/report/overview.html
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Suspicious File
Score:
0.34
Link:
https://yomi.yoroi.company/submissions/3c3024e4c2b075b12063e4af1bb3886d4e7ee25e8d1bb4fc52ea51535ab1e1ae

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.

Rule name:win_icedid_auto
Create hunting rule
Author:Felix Bilstein - yara-signator at cocacoding dot com
Description:Detects win.icedid.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Comments