Analysis
-
max time kernel
147s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
05/01/2024, 05:40
General
-
Target
2024-01-01_34d0ec1b50a9266dd1a2bf7087654544_icedid.exe
-
Size
383KB
-
MD5
34d0ec1b50a9266dd1a2bf7087654544
-
SHA1
980f35bc781f657d92915757a753eb53ec8505a1
-
SHA256
c7591874ab92e8f9d9424d29fbf44e288f7ef7b358447d51e45906af7b4c3bf5
-
SHA512
8c4a0e530cb7b1417a192124f1159c764397452a58e5122714b47ade9026273eb47097374496ea7050a6e918a97855d487664f9ad21889aa1ca21070712719df
-
SSDEEP
6144:jplrlbbDdQaqd2X/96fr3KFEUGjr8uB2WgcA0cpXEVNrvGZ4FUqm6:jplrVbDdQaqdS/ofraFErH8uB2Wm0SXj
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-01_34d0ec1b50a9266dd1a2bf7087654544_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-01_34d0ec1b50a9266dd1a2bf7087654544_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\verify\Framework.exe"C:\Program Files\verify\Framework.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
92KB
MD56399f40d9577510c3c4a79d31747d61e
SHA18cd74101d9bfeacbf9dffcdfc52e15b1a6769441
SHA256b4981e50104e9986b9a9cf9590fd336f0669aed52ce45e4e5cb25f3ce897896c
SHA51296e2a81cc3ca569400afb3da137caee3ba3c563b81a55497374328785d8969d29f40182aabde45d3466f88ed851ad1731ef9fd15e7cd0ceb24d70df5f1db26e3
-
Filesize
383KB
MD535bc228e9b50f8311477469ee78047c8
SHA11768fb36053e2886dc03c50d1f6a254ced3ac9ec
SHA256f6605b4cbf97de8b9e6f8d60b8d674bde2b22e2965075e2679d2570db63a9315
SHA512ef549e04b308d017f9171191ef6e4c219895c8b37cffae11fd4ae0f4e700522632aa1c7bf9c513e45c60e33b94769e50e65340bd19a60de81a48cc6eeef00679