Analysis
-
max time kernel
121s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
05-01-2024 05:45
General
-
Target
2024-01-01_85217c1eee987250239b014222fdb74f_icedid.exe
-
Size
383KB
-
MD5
85217c1eee987250239b014222fdb74f
-
SHA1
3201f2c4d7ce4d04443046f368bdd9011a10ada0
-
SHA256
d145a05043b8b69dc6afe3961375272445dd9a769f51f33c8c9cf75de04a3400
-
SHA512
311506242893ca64a0d92e9319a0a439a6f91cad4d381aa361d9e8323f03821eb48802d455bfea3f04fa27d07cade32194cd05dc929050a543d7343997e8b3c8
-
SSDEEP
6144:AplrlbbDdQaqd2X/96fr3KFEUGjr8uB2WgcA0cpXEVNrvGZ4FUqm6:AplrVbDdQaqdS/ofraFErH8uB2Wm0SXj
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-01_85217c1eee987250239b014222fdb74f_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-01_85217c1eee987250239b014222fdb74f_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\topics\Morgan.exe"C:\Program Files\topics\Morgan.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
384KB
MD584d84257f19eee9d790b5b314597b9f4
SHA163cd12aaac6e86fbe607487b13816a640b12e5ed
SHA256749f141bd09e9acd21d2e25a57754e421169c7c3b44cf5d7400e90269e5e1aa1
SHA512322f3abd4fe3fc2b5ce7250f1b95d79b99972265691831f39bb24a0417df58d9ae5b5bc0f5ab58f9b4b5697eacab578fb97a189d8d69fe40d6ed503b5387a8a3