Malware2023

IcedID

1Rules

2References

1Folders

2023-08-31Latest

Summary

IcedID is tracked here as a malware family or toolset with 1 Sigma detection spanning 2023. Coverage centers on windows / process_creation.

Related Detections

Search this threat

Emerging Threathightest

IcedID Malware Suspicious Single Digit DLL Execution Via Rundll32

Detects RunDLL32.exe executing a single digit DLL named "1.dll" with the export function "DllRegisterServer". This behaviour was often seen used by malware and especially IcedID

WindowsProcess Creation

TA0005 · StealthT1218.011 · Rundll32detection.emerging-threats

Nasreddine Bencherchali (Nextron Systems)Thu Aug 312023

References