Analysis
-
max time kernel
122s -
max time network
130s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
10-01-2024 05:57
General
-
Target
2024-01-09_8c9ae892e80594e2a2ba96e5b70b7b33_icedid.exe
-
Size
306KB
-
MD5
8c9ae892e80594e2a2ba96e5b70b7b33
-
SHA1
6f34562de2086b6d3f0eaa4c14bd02ac7a19dbda
-
SHA256
a29f69bd55a5c393664b04b5617ec88cbfbfca23b967200002ae4915ed12e6c6
-
SHA512
a27b2ce588eac1b36746b872c156dca5ead3ab9534cb8a3707dfc4dd6d81580c132f94981f632b47802563e77d28d1ef21648004cc7d52cb3f804ad56cde5b87
-
SSDEEP
3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-09_8c9ae892e80594e2a2ba96e5b70b7b33_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-09_8c9ae892e80594e2a2ba96e5b70b7b33_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\December\future.exe"C:\Program Files\December\future.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
222KB
MD549fec6cc597da48a11cc0e7407aecea8
SHA14c9b22f5a208e6326f09591adb30fe32f325d41c
SHA256f5e679c0ec486001274e2b60dd3497d3657a33860a09a7b99f3c183ef8703f8f
SHA5125feeef9f78ee06f82179cab5f122ff60a62f60d868fc8dc39df2c4fc115fdb3b075e9c911948eaeb0314d1249d7d2c23d040da7fee9b3fb09899785fd632625f
-
Filesize
307KB
MD5517d0b94ae054aa2f57d9930490a55d8
SHA150d0d859f2e8ffc34cbf54db898bd70d5057e191
SHA2562d7e31ebd15179b561bf704a9516b52c9f90a7db77db660694a6fd6a7bf23617
SHA5129fd0db90e527ac758fa4cb8bc5b1eab5f6109460ed5da0c46381b22e8b1068d524e702437c0de9d1481035e9d3850f7dd990abe4d4c3ade884b92be23859047b
-
Filesize
155KB
MD51b3ca2d6a4ef86950ed91f0711a8b98c
SHA159618686c0dfc00c35e52cde6abd6bfd9369a1d4
SHA256d3ad1c196241172bfea810331f604aba9962ed667ac145d880923ce34147e41e
SHA5121e3aa097954440ba53d3eae351b9045437920e4c0713f057515c60abf12d49f4e4550f82c48149c5fab447caced39dc015a8cae271108915a0ca9a662d448a38
-
Filesize
176KB
MD5ebc75fc4ed9a455e25dd803a7e6a7d6e
SHA12bcd7826cef1893dd281741eaa5a07b78149c1e8
SHA25617507e96560c808a2a6593fbe7aec4279d63aaf82cdbb5e2fecf869d742f1036
SHA512e85fc6794c95cce95cfca391829bf74bb62863fc4377d6e2b392d51c806bf51786af9110fe42efdb6352556ba12eec7fe6a028d192be4a87600ff719b221ef76