Analysis
-
max time kernel
141s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
02/08/2023, 18:37
General
-
Target
4187bb57ddb591aed403676703255575_icedid_JC.exe
-
Size
262KB
-
MD5
4187bb57ddb591aed403676703255575
-
SHA1
022afc11a50634b76e5510303b90e92b7c5d4e7e
-
SHA256
31be59424a9189d9cb6ab55f2362b0cc588ba50ac264b5033b224ccd4247e90b
-
SHA512
92728189ac83661ddeae3c152f4d803a60d3ad732f434fcfa0eaed8e9ddbbf7dd23c361752a32aa44a0f6cfb84519a1fc7e796fccce51fea002574e4a1346b1a
-
SSDEEP
3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4187bb57ddb591aed403676703255575_icedid_JC.exe"C:\Users\Admin\AppData\Local\Temp\4187bb57ddb591aed403676703255575_icedid_JC.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\proper\structure.exe"C:\Program Files\proper\structure.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
263KB
MD59c923be5682cf9e816d06bf7ecc075ee
SHA13a9bdfb2b1ffabd38fc5d034aab1de532df3690d
SHA2568d34a4bc801dbd0264c8fe77daa3c19630430107b6af72d6388474c4a746b612
SHA512732ab6a8a0b75bb1e69ebb1c8e9782ccf9170ce504f02e25401c695a3de88e1a346ca453ec65e29139b833622ef4e6ff19267a06e1cfdf684d1904f51f22a127
-
Filesize
263KB
MD59c923be5682cf9e816d06bf7ecc075ee
SHA13a9bdfb2b1ffabd38fc5d034aab1de532df3690d
SHA2568d34a4bc801dbd0264c8fe77daa3c19630430107b6af72d6388474c4a746b612
SHA512732ab6a8a0b75bb1e69ebb1c8e9782ccf9170ce504f02e25401c695a3de88e1a346ca453ec65e29139b833622ef4e6ff19267a06e1cfdf684d1904f51f22a127