Analysis
-
max time kernel
150s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20230831-en -
resource tags
arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system -
submitted
02/09/2023, 18:51
Static task
static1
Behavioral task
behavioral1
Sample
2023-08-22_61ddb6e366b6a4a890386eb1e252e045_icedid_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2023-08-22_61ddb6e366b6a4a890386eb1e252e045_icedid_JC.exe
Resource
win10v2004-20230831-en
General
-
Target
2023-08-22_61ddb6e366b6a4a890386eb1e252e045_icedid_JC.exe
-
Size
5.3MB
-
MD5
61ddb6e366b6a4a890386eb1e252e045
-
SHA1
f41d610e7fad178065014751d26076425bdb0d77
-
SHA256
b6a94b952ee4f5b840db0d2fb5544faab7fc001a99082ddcc3ad289470cabdc7
-
SHA512
d7184198e0953593f6adabcdeadbe1168a42c221b78acb37b21b54273b04a1dabff67617cffe1b9fbc50ddf1c6ab9d9891f2298e4b4618e78e462ab7b816396b
-
SSDEEP
98304:ftioFYmzBvyDNmKCl626t6T6i6u6Wk/jcB9TZ27vsfuKSAe7z6OGzO0fpr:UEtDdaKIv6OGFh
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 4652 2023-08-22_61ddb6e366b6a4a890386eb1e252e045_icedid_JC.exe -
Drops file in Windows directory 4 IoCs
description ioc Process File created C:\Windows\DSIpcAg.dll 2023-08-22_61ddb6e366b6a4a890386eb1e252e045_icedid_JC.exe File created C:\Windows\SXTracer.dll 2023-08-22_61ddb6e366b6a4a890386eb1e252e045_icedid_JC.exe File created C:\Windows\DSLang.dll 2023-08-22_61ddb6e366b6a4a890386eb1e252e045_icedid_JC.exe File created C:\Windows\DSTermPr.dll 2023-08-22_61ddb6e366b6a4a890386eb1e252e045_icedid_JC.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4652 2023-08-22_61ddb6e366b6a4a890386eb1e252e045_icedid_JC.exe 4652 2023-08-22_61ddb6e366b6a4a890386eb1e252e045_icedid_JC.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
47KB
MD5169b1e58740a3466f7b5030362ce4a79
SHA1ad48f58e90dd3f24001aa1a3413705b0570eb4fe
SHA256dabca866cea4897e072e6b3d216c623901db910df7faafea8186c19d4bcfa410
SHA51262ea144672429277ef42138f8d6690ffea78513c2563dd15925e7a522bf1b55dafda2dfe7b1a3d5a339a27d071125e26e98db2758415c7d6d2e9c6461104ca93