Analysis
-
max time kernel
122s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
-
submitted
04/08/2023, 15:05
General
-
Target
5983adfaecf149fba527ead75d5458a6_icedid_JC.exe
-
Size
261KB
-
MD5
5983adfaecf149fba527ead75d5458a6
-
SHA1
26f5b4b83ca7b266ab88a73659e99b84714fd863
-
SHA256
eec7683ec5fbaff148591f05c51908d375bfc63f634e836947635b7ff6ed4a5c
-
SHA512
e4512ff518801cf486b1c992f252dbdbbcd02d1330bb112d117bc1fa500a56834eadd8655039a26604635d23def042dceb660c352e4adcf5bba0424e3205db5a
-
SSDEEP
3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5983adfaecf149fba527ead75d5458a6_icedid_JC.exe"C:\Users\Admin\AppData\Local\Temp\5983adfaecf149fba527ead75d5458a6_icedid_JC.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Graphics\Security.exe"C:\Program Files\Graphics\Security.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
261KB
MD52274efbb362969ee105a63ac9ee41761
SHA1559f5bf425b01d008064704d73956a3a9e56876e
SHA256edb5ef7240c95c20dbfb495b365ecbd234483ebf9f735f2db115daa587972d9a
SHA512d65d006fc40c8efda49817c385a3f184378fb7f47472e076fb2ace97261a53ec2669155960da69e7cc107e10cb4b72caaba82f089b098c596579026cf2b46b7a
-
Filesize
261KB
MD52274efbb362969ee105a63ac9ee41761
SHA1559f5bf425b01d008064704d73956a3a9e56876e
SHA256edb5ef7240c95c20dbfb495b365ecbd234483ebf9f735f2db115daa587972d9a
SHA512d65d006fc40c8efda49817c385a3f184378fb7f47472e076fb2ace97261a53ec2669155960da69e7cc107e10cb4b72caaba82f089b098c596579026cf2b46b7a
-
Filesize
261KB
MD52274efbb362969ee105a63ac9ee41761
SHA1559f5bf425b01d008064704d73956a3a9e56876e
SHA256edb5ef7240c95c20dbfb495b365ecbd234483ebf9f735f2db115daa587972d9a
SHA512d65d006fc40c8efda49817c385a3f184378fb7f47472e076fb2ace97261a53ec2669155960da69e7cc107e10cb4b72caaba82f089b098c596579026cf2b46b7a
-
Filesize
261KB
MD52274efbb362969ee105a63ac9ee41761
SHA1559f5bf425b01d008064704d73956a3a9e56876e
SHA256edb5ef7240c95c20dbfb495b365ecbd234483ebf9f735f2db115daa587972d9a
SHA512d65d006fc40c8efda49817c385a3f184378fb7f47472e076fb2ace97261a53ec2669155960da69e7cc107e10cb4b72caaba82f089b098c596579026cf2b46b7a