Analysis
-
max time kernel
153s -
max time network
164s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
11-01-2024 05:55
General
-
Target
2024-01-10_b8890080f05a7b1a44a827729dc05325_icedid.exe
-
Size
387KB
-
MD5
b8890080f05a7b1a44a827729dc05325
-
SHA1
228f064549c59699463f7e4fc945428cfc9df807
-
SHA256
f08a71f1c2780e4e119021944f1373e42c8f1edbec8fb0dddb820fc58ec619e0
-
SHA512
f29f629fd95cc3f7d6fde41af02d244cb47ca612ba0137fae296e53335ae3174a8435e4b5a01344fc9567f0c92a728e7f40b5e425f377ce76ba14722cdcc0c9e
-
SSDEEP
12288:OplrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:6xRQ+Fucuvm0as
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-10_b8890080f05a7b1a44a827729dc05325_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-10_b8890080f05a7b1a44a827729dc05325_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Employ\boxes.exe"C:\Program Files\Employ\boxes.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
387KB
MD50a9ed55905eb7c18a2c491a279c3b857
SHA1f2538be63d353b40a6dbd20da6fc923ba44042a6
SHA256abbd658930d7d3cd0c611a2b3edca6feea445dfaab8fce1abe697828524196ae
SHA512989f946973e4b4c14ef14f38ba8a09d2fb5a593b7a55b2a43204b5e8398d7cfbd633e75ded03ff6826cd345ec0c48990f118b726cddeb61feb67d9f4936e62b9