Analysis
-
max time kernel
153s -
max time network
169s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
11/10/2023, 17:46
General
-
Target
2023-08-26_5c13eed7ca74e0f38e3a927f55ead91b_icedid_JC.exe
-
Size
368KB
-
MD5
5c13eed7ca74e0f38e3a927f55ead91b
-
SHA1
1712fa50e5e354484787afb57f0bb67d9f23a9b9
-
SHA256
3aacb02a5b8adbd9469fe4e87cfec39c4f1e2a9e8c52deef3ac044225da8dddc
-
SHA512
145c7a5d4d5d73106f1ca3efb489b8d1d092e54b53363b09058852f172628939d3da6c9b77e0be4a56d15bbc3f4885a27e9f06003cddfdf3b7b428ed8e61b273
-
SSDEEP
6144:kplrlbbDdQaqd2X/96fr3KFEUGjr8uB2WgcA0cpXEVNrvGZ4FUqm6:kplrVbDdQaqdS/ofraFErH8uB2Wm0SXj
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2023-08-26_5c13eed7ca74e0f38e3a927f55ead91b_icedid_JC.exe"C:\Users\Admin\AppData\Local\Temp\2023-08-26_5c13eed7ca74e0f38e3a927f55ead91b_icedid_JC.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\managed\code.exe"C:\Program Files\managed\code.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
368KB
MD5b0affadf2d0f43eeb526f831f438bd17
SHA168efd632aa9e28a980bd15cff4914c2e8d763971
SHA256c1371e7e9bbe8ebf941742afd0113a3de6cf9971b578ae33063ac170d21ce1d8
SHA512a747ccc8862c19babed945a5873367d9934f7bdfdd99a31e073a8239db3b9c5123e346def3e3dbbef73b8d0e0cd09ef25d5c8c482aadc9c485f6daf0207ff901
-
Filesize
368KB
MD5b0affadf2d0f43eeb526f831f438bd17
SHA168efd632aa9e28a980bd15cff4914c2e8d763971
SHA256c1371e7e9bbe8ebf941742afd0113a3de6cf9971b578ae33063ac170d21ce1d8
SHA512a747ccc8862c19babed945a5873367d9934f7bdfdd99a31e073a8239db3b9c5123e346def3e3dbbef73b8d0e0cd09ef25d5c8c482aadc9c485f6daf0207ff901