Analysis

  • max time kernel
    149s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    05-01-2024 05:51

General

  • Target

    2024-01-01_d8502ad368cdecd7bab1d0a3d998d56f_icedid.exe

  • Size

    1.3MB

  • MD5

    d8502ad368cdecd7bab1d0a3d998d56f

  • SHA1

    fcca14361fb7535458d811e491d200cdd0248d28

  • SHA256

    d3f07755098208a90d2b6e6775da8dc0dbfff660fa246f464a06dad0102cee09

  • SHA512

    38a9b81983dcb0453a86178ced87b470b8a85852f10b12fa7511bd50153d18e7c192828608dba8921771e5dc25bd317a1243a5ac6981d45072b1d2b0bcd2ef92

  • SSDEEP

    24576:ks8E5XE5T7eKtAMFqsGkIvfFqmTI8YHkktsUyExu:k1TLtDFqsVIv9qmTI8YED5

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: LoadsDriver 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-01-01_d8502ad368cdecd7bab1d0a3d998d56f_icedid.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-01-01_d8502ad368cdecd7bab1d0a3d998d56f_icedid.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1716

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1716-0-0x0000000000400000-0x000000000055B000-memory.dmp

    Filesize

    1.4MB