Analysis
-
max time kernel
118s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
-
submitted
03/08/2023, 16:39
General
-
Target
4de79557459843e55b8ab07704ff1a1f_icedid_JC.exe
-
Size
261KB
-
MD5
4de79557459843e55b8ab07704ff1a1f
-
SHA1
cd980639e32c2582a3ed8bb3e2e62e585b20e4f9
-
SHA256
81d467eef22c20d1f649f185e8ce2145ad04dae6447a2ca9e90bc0b2aa41c6d9
-
SHA512
a7c7d25acc116ff99a31d114bfd3af4ff7a5b22c61c9fc29bbd94bbec1251bc25307dc53af6876ff299d4edff81854a4ca18a7d335485545cf36b005422eadd9
-
SSDEEP
3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4de79557459843e55b8ab07704ff1a1f_icedid_JC.exe"C:\Users\Admin\AppData\Local\Temp\4de79557459843e55b8ab07704ff1a1f_icedid_JC.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\previous\behavioral.exe"C:\Program Files\previous\behavioral.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
261KB
MD51cad43dccc3c698ce345ff2beb91374c
SHA133b3b0b150af07705269290974bf032c18047cb8
SHA256f79968df1e947fbf93776ef4e6d81d1d4a15d33404d4650d345f2ac938d73a89
SHA5128c094accea501785e87828df252550c7206b46cb02e120c46f9dd2b2624925fd07d3322c7f447d3406f9fdfa95d98d0656107ce052038335e5d75313d4327cf2
-
Filesize
261KB
MD51cad43dccc3c698ce345ff2beb91374c
SHA133b3b0b150af07705269290974bf032c18047cb8
SHA256f79968df1e947fbf93776ef4e6d81d1d4a15d33404d4650d345f2ac938d73a89
SHA5128c094accea501785e87828df252550c7206b46cb02e120c46f9dd2b2624925fd07d3322c7f447d3406f9fdfa95d98d0656107ce052038335e5d75313d4327cf2
-
Filesize
261KB
MD51cad43dccc3c698ce345ff2beb91374c
SHA133b3b0b150af07705269290974bf032c18047cb8
SHA256f79968df1e947fbf93776ef4e6d81d1d4a15d33404d4650d345f2ac938d73a89
SHA5128c094accea501785e87828df252550c7206b46cb02e120c46f9dd2b2624925fd07d3322c7f447d3406f9fdfa95d98d0656107ce052038335e5d75313d4327cf2
-
Filesize
261KB
MD51cad43dccc3c698ce345ff2beb91374c
SHA133b3b0b150af07705269290974bf032c18047cb8
SHA256f79968df1e947fbf93776ef4e6d81d1d4a15d33404d4650d345f2ac938d73a89
SHA5128c094accea501785e87828df252550c7206b46cb02e120c46f9dd2b2624925fd07d3322c7f447d3406f9fdfa95d98d0656107ce052038335e5d75313d4327cf2