Analysis
-
max time kernel
141s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
01/08/2023, 16:39
General
-
Target
30f489c2460464a11b4ce682a11e2a1f_icedid_JC.exe
-
Size
406KB
-
MD5
30f489c2460464a11b4ce682a11e2a1f
-
SHA1
a8838101dc5d829619b1d57df41d8135fafae1b3
-
SHA256
61082d64fb58f55c4f207b977b90c08a6c88841ea958a58862d68226f925b0cd
-
SHA512
352e8d969711eb349b24cc07212bbf6556c766ea7127349a5cc0d632246e505e91f3d525f04f144a62788c445480ab0ce34fb69072ef10ca0a77d95d2736132c
-
SSDEEP
12288:9plrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:fxRQ+Fucuvm0as
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\30f489c2460464a11b4ce682a11e2a1f_icedid_JC.exe"C:\Users\Admin\AppData\Local\Temp\30f489c2460464a11b4ce682a11e2a1f_icedid_JC.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\customer\component.exe"C:\Program Files\customer\component.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
407KB
MD55fa6884e9bb31e3d677754917be71ad9
SHA17e3d50eff83adba91774b1663e62745ca0021887
SHA25635a999515860ffd4d2b3d3708f4efec9395b728d031a3b933acea65a672bb288
SHA512ab0330c6566a6f8756657413c19745a334f19be0fb5f6a6c55f4856cfad53efb25d1820d067480dba5358bce601944ae42bbe970323e4cf0b1c5c5aefd4ab591
-
Filesize
407KB
MD55fa6884e9bb31e3d677754917be71ad9
SHA17e3d50eff83adba91774b1663e62745ca0021887
SHA25635a999515860ffd4d2b3d3708f4efec9395b728d031a3b933acea65a672bb288
SHA512ab0330c6566a6f8756657413c19745a334f19be0fb5f6a6c55f4856cfad53efb25d1820d067480dba5358bce601944ae42bbe970323e4cf0b1c5c5aefd4ab591