Analysis
-
max time kernel
121s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
-
submitted
01/08/2023, 16:39
General
-
Target
30f489c2460464a11b4ce682a11e2a1f_icedid_JC.exe
-
Size
406KB
-
MD5
30f489c2460464a11b4ce682a11e2a1f
-
SHA1
a8838101dc5d829619b1d57df41d8135fafae1b3
-
SHA256
61082d64fb58f55c4f207b977b90c08a6c88841ea958a58862d68226f925b0cd
-
SHA512
352e8d969711eb349b24cc07212bbf6556c766ea7127349a5cc0d632246e505e91f3d525f04f144a62788c445480ab0ce34fb69072ef10ca0a77d95d2736132c
-
SSDEEP
12288:9plrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:fxRQ+Fucuvm0as
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\30f489c2460464a11b4ce682a11e2a1f_icedid_JC.exe"C:\Users\Admin\AppData\Local\Temp\30f489c2460464a11b4ce682a11e2a1f_icedid_JC.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\component\Graphics.exe"C:\Program Files\component\Graphics.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
407KB
MD5d0b7924aaffbdea98b77240f59216938
SHA1b41e2edf345c5e82590f9d03c734c6f19099c2b8
SHA256ac0bc94be6ab2e0effc4256a8c0137a4cafb41e908eccfdcc9245b2543c816d3
SHA512b8469882d854f5b225e86608e29fd9634d76bb1f13c8a792827d4bb497380ad1085d13d8929562f76254a5fd5455bce3f8bf473a246504bda58e6c7d6a04e9e2
-
Filesize
407KB
MD5d0b7924aaffbdea98b77240f59216938
SHA1b41e2edf345c5e82590f9d03c734c6f19099c2b8
SHA256ac0bc94be6ab2e0effc4256a8c0137a4cafb41e908eccfdcc9245b2543c816d3
SHA512b8469882d854f5b225e86608e29fd9634d76bb1f13c8a792827d4bb497380ad1085d13d8929562f76254a5fd5455bce3f8bf473a246504bda58e6c7d6a04e9e2
-
Filesize
407KB
MD5d0b7924aaffbdea98b77240f59216938
SHA1b41e2edf345c5e82590f9d03c734c6f19099c2b8
SHA256ac0bc94be6ab2e0effc4256a8c0137a4cafb41e908eccfdcc9245b2543c816d3
SHA512b8469882d854f5b225e86608e29fd9634d76bb1f13c8a792827d4bb497380ad1085d13d8929562f76254a5fd5455bce3f8bf473a246504bda58e6c7d6a04e9e2
-
Filesize
407KB
MD5d0b7924aaffbdea98b77240f59216938
SHA1b41e2edf345c5e82590f9d03c734c6f19099c2b8
SHA256ac0bc94be6ab2e0effc4256a8c0137a4cafb41e908eccfdcc9245b2543c816d3
SHA512b8469882d854f5b225e86608e29fd9634d76bb1f13c8a792827d4bb497380ad1085d13d8929562f76254a5fd5455bce3f8bf473a246504bda58e6c7d6a04e9e2