Analysis
-
max time kernel
122s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20231023-en -
resource tags
-
submitted
31-10-2023 15:38
General
-
Target
NEAS.2023-09-05_c56a291cd9dcf54673775b8ab2392085_icedid_JC.exe
-
Size
366KB
-
MD5
c56a291cd9dcf54673775b8ab2392085
-
SHA1
3d4dfaf5a837e8a6ff6c431fdbf1892d7b07688b
-
SHA256
066451ea9a9edc7d5f6dbc0c257dc4e7df0a68e62d151bfd5697ee14ff03a4bf
-
SHA512
0d939c0f92d7d235bc1efc1470142cca3d4ddd62ff31b84bad7db5d18928680f08f83faa871055cc7183d120a3187de1efc544d146a31f42e2319968a4d58178
-
SSDEEP
6144:SplrlbbDdQaqd2X/96fr3KFEUGjr8uB2WgcA0cpXEVNrvGZ4FUqm6:SplrVbDdQaqdS/ofraFErH8uB2Wm0SXj
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.2023-09-05_c56a291cd9dcf54673775b8ab2392085_icedid_JC.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.2023-09-05_c56a291cd9dcf54673775b8ab2392085_icedid_JC.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Autorun\compact.exe"C:\Program Files\Autorun\compact.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
366KB
MD52461a7db8bf114516401088b2486d2d4
SHA176809e29cdf1bb37972a8bd8eed8d71244c6cd03
SHA25648999f001bd039d4ef87304fd4b3692c50fb064ba8290838ee274c98a906c617
SHA512b93107cd0e97b957e747c7828b009d00a2cbf2b1c33c0dd69b9cc5a30ff2ad0f32cb07e865e8f300a6a4384924cfb11d9a4166dbea2651c67eb564fabbdad18b
-
Filesize
366KB
MD52461a7db8bf114516401088b2486d2d4
SHA176809e29cdf1bb37972a8bd8eed8d71244c6cd03
SHA25648999f001bd039d4ef87304fd4b3692c50fb064ba8290838ee274c98a906c617
SHA512b93107cd0e97b957e747c7828b009d00a2cbf2b1c33c0dd69b9cc5a30ff2ad0f32cb07e865e8f300a6a4384924cfb11d9a4166dbea2651c67eb564fabbdad18b
-
Filesize
366KB
MD52461a7db8bf114516401088b2486d2d4
SHA176809e29cdf1bb37972a8bd8eed8d71244c6cd03
SHA25648999f001bd039d4ef87304fd4b3692c50fb064ba8290838ee274c98a906c617
SHA512b93107cd0e97b957e747c7828b009d00a2cbf2b1c33c0dd69b9cc5a30ff2ad0f32cb07e865e8f300a6a4384924cfb11d9a4166dbea2651c67eb564fabbdad18b
-
Filesize
366KB
MD52461a7db8bf114516401088b2486d2d4
SHA176809e29cdf1bb37972a8bd8eed8d71244c6cd03
SHA25648999f001bd039d4ef87304fd4b3692c50fb064ba8290838ee274c98a906c617
SHA512b93107cd0e97b957e747c7828b009d00a2cbf2b1c33c0dd69b9cc5a30ff2ad0f32cb07e865e8f300a6a4384924cfb11d9a4166dbea2651c67eb564fabbdad18b