Analysis
-
max time kernel
148s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
12/01/2024, 05:54
General
-
Target
2024-01-11_02e2be26a45e0ffe18f29c4a6f453be1_icedid.exe
-
Size
424KB
-
MD5
02e2be26a45e0ffe18f29c4a6f453be1
-
SHA1
6f7999aa88b96d1fc19596a5f0ba8be5c3609daf
-
SHA256
9e891b9a6fbeef3246f55825dfc25c04d6bc5879f31e37e5c669e871dd49df06
-
SHA512
37be542e8f90b97d888e58fd99d3fc89a45c6c869389f8fbbdf63a8a76dea54c5abc77675fbd570c2080c5590d7b28139c80ccdf8d6748c15ba374b903186e84
-
SSDEEP
12288:vplrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:BxRQ+Fucuvm0as
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-11_02e2be26a45e0ffe18f29c4a6f453be1_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-11_02e2be26a45e0ffe18f29c4a6f453be1_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Diagnostic\Tool.exe"C:\Program Files\Diagnostic\Tool.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
92KB
MD5f7a1721b0827887004f45d20f6f364e1
SHA1bd00cb6204670a0d15ab534cee842f65fe916d75
SHA25681193845bbaed2fdc54fab800fb6a253ff25d7915b327b9bd2b352a71e979ca8
SHA5127c04679e10358fac360202182e6b1c704fe69dccc569f06b7654e15b7012869203589c09d8552f4b736b08700c98b47f11deed862a21186850d714c6ff2ff96f