Analysis
-
max time kernel
151s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
05-08-2023 13:13
General
-
Target
70897c469de7501042fd7693433e4c48_icedid_JC.exe
-
Size
367KB
-
MD5
70897c469de7501042fd7693433e4c48
-
SHA1
a35e02f631ee641b046da95422fb43a3dc866015
-
SHA256
66bdeaa8034b515dc9e3fe949c785a97fa4c784fef6f5d7ed085d1ee7d1388d5
-
SHA512
ec4726110b1457aafc1b03bf3a7979a388f0991679445c2c1689295cc01b88fcc9e27eb9171ea167b6f4264b40c78062c2936417699aec307154e2fbc2ebb406
-
SSDEEP
6144:uplrlbbDdQaqd2X/96fr3KFEUGjr8uB2WgcA0cpXEVNrvGZ4FUqm6:uplrVbDdQaqdS/ofraFErH8uB2Wm0SXj
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\70897c469de7501042fd7693433e4c48_icedid_JC.exe"C:\Users\Admin\AppData\Local\Temp\70897c469de7501042fd7693433e4c48_icedid_JC.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\install\install.exe"C:\Program Files\install\install.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
367KB
MD5747be1d499dfc6f555bbef5d826b2bf9
SHA10043519fc58b8a07ed3fe5e573b1c19d9469db04
SHA2569919ec20104808656d49ed47f1c97de6e328cbc543fdc41890624a44e82c76d3
SHA5125b20f75e3a4b9999e66428cc8d06a65903280b7c2b669d16b4b23afefed6cc20d79771b7a207f919b738bceac4e96aba4af7be5aefd60a7898468f83ea1faa58
-
Filesize
367KB
MD5747be1d499dfc6f555bbef5d826b2bf9
SHA10043519fc58b8a07ed3fe5e573b1c19d9469db04
SHA2569919ec20104808656d49ed47f1c97de6e328cbc543fdc41890624a44e82c76d3
SHA5125b20f75e3a4b9999e66428cc8d06a65903280b7c2b669d16b4b23afefed6cc20d79771b7a207f919b738bceac4e96aba4af7be5aefd60a7898468f83ea1faa58