Analysis
-
max time kernel
139s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
06/08/2023, 15:25
General
-
Target
8bd9bb95e807a85d080492b95e7bdac6_icedid_JC.exe
-
Size
369KB
-
MD5
8bd9bb95e807a85d080492b95e7bdac6
-
SHA1
3e6bde8fc428bf90b890ed5bc821ef2dbad727f2
-
SHA256
6818b8285aba6519474086e3bd607144a7edad98f57914564eb33db8877d954a
-
SHA512
6919796f8528ad443b3a0ea8f341291b8c942d853f3685ba3b927050bf9c43862d7cd81cf486e6fec5e7feaf0ef1bf617983c36c5d7f8609197221c50cb1fc65
-
SSDEEP
6144:TplrlbbDdQaqd2X/96fr3KFEUGjr8uB2WgcA0cpXEVNrvGZ4FUqm6:TplrVbDdQaqdS/ofraFErH8uB2Wm0SXj
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8bd9bb95e807a85d080492b95e7bdac6_icedid_JC.exe"C:\Users\Admin\AppData\Local\Temp\8bd9bb95e807a85d080492b95e7bdac6_icedid_JC.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\December\future.exe"C:\Program Files\December\future.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
370KB
MD517fdbfe7ece3c6f18cde10ac69ab023a
SHA1d613480b87ae8b450048ef27d8f4a043cc5d98e2
SHA256ade971a9b4f7da6d6cbe476db067fdf2c79e0665ca0deab0e6b911992f9d98bb
SHA512ca9c57fe975dcd65093238669912caf0a16f09222e8dc0396e1d40829ceb7c10bf1f46bc669344400a64919ac6424faeed0ffd0222e2ebd81d7eca6c8d832d69
-
Filesize
370KB
MD517fdbfe7ece3c6f18cde10ac69ab023a
SHA1d613480b87ae8b450048ef27d8f4a043cc5d98e2
SHA256ade971a9b4f7da6d6cbe476db067fdf2c79e0665ca0deab0e6b911992f9d98bb
SHA512ca9c57fe975dcd65093238669912caf0a16f09222e8dc0396e1d40829ceb7c10bf1f46bc669344400a64919ac6424faeed0ffd0222e2ebd81d7eca6c8d832d69