Analysis
-
max time kernel
160s -
max time network
168s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
11-01-2024 05:58
General
-
Target
2024-01-10_e3b0bf3a86a6f446f97d4f99dfbd1835_icedid.exe
-
Size
306KB
-
MD5
e3b0bf3a86a6f446f97d4f99dfbd1835
-
SHA1
f80c597f4eea3eb0ac013d7bad584ddc3fd19e8b
-
SHA256
124d78a797400e6b2e28bee7df3ae97fa0e665b0e222caa2e28acb6679c31fbc
-
SHA512
92f8438088845146c9bcbdcb4d671ec694c394da0c2e0cb927492cecaa2b8751d3d74be0de25beb750b95124daf58fd12a93faa882bac4c2af92c52314e1a6f6
-
SSDEEP
3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-10_e3b0bf3a86a6f446f97d4f99dfbd1835_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-10_e3b0bf3a86a6f446f97d4f99dfbd1835_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\withthe\provides.exe"C:\Program Files\withthe\provides.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
306KB
MD59fdd58cdc7c0e8bf65f84f3f30345bb8
SHA191165b1dca2812d9ceba91796778473daef321d2
SHA2560bf807c23553cc9f1712a02bf430e89f0a8ca7e3ea1b5c119c9ce9eaf0c1823a
SHA512bab445dfe54ca6466d544ae40eea5503da584b5a132e567213ef3fa14cd1c519e2e4d320fb4895c00c2797993bdd93a3d93a7c08bef9221658760657a39b7b18