Analysis
-
max time kernel
117s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
02-10-2023 11:26
General
-
Target
2023-08-26_f9191776489a2a5d386a3bb8f5b773dc_hacktools_icedid_JC.exe
-
Size
4.7MB
-
MD5
f9191776489a2a5d386a3bb8f5b773dc
-
SHA1
795ad4e85c28018cbec6be4212b0f5336d8eb141
-
SHA256
21b895c274ddd9db623d20c76cf7ac02b6b306f15821beb95a96203d772565e0
-
SHA512
8e943bac2d398b965f159293d9963b41ab6932beee736197dc2b2c9597b00f47f1c620750d3256ceefc49f992e4ff7057413de457c3a4ca32f31151e0b47c225
-
SSDEEP
98304:ia7uNvd99EElhSdZuArD3OJBAUZLsZMVfkr:cNn9EEuuOKJV3y
Score
7/10
Malware Config
Signatures
-
UPX packed file 25 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Program crash 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2023-08-26_f9191776489a2a5d386a3bb8f5b773dc_hacktools_icedid_JC.exe"C:\Users\Admin\AppData\Local\Temp\2023-08-26_f9191776489a2a5d386a3bb8f5b773dc_hacktools_icedid_JC.exe"1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1496 -s 3482⤵
- Program crash
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
92KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
5.0MB
-
Filesize
248KB