Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
12/01/2024, 06:05
General
-
Target
2024-01-11_c732cea5c2a5c86009180dbdd368dd67_icedid.exe
-
Size
377KB
-
MD5
c732cea5c2a5c86009180dbdd368dd67
-
SHA1
3b6720cca0a495db05f8e558f2de2dfb4b8d7caa
-
SHA256
6d215b82e7e23f5719d7eef06f7828b31de2ddbbc369cc51c061c7c1eef585f8
-
SHA512
7b5560902f5692aab7764b65438b6ee66a42a9841413c0db72fbe8641646174651a1b7f9bf628c8279f29c2f9f567be04749fe92b6153f68231903850d9e45ba
-
SSDEEP
6144:JplrlbbDdQaqd2X/96fr3KFEUGjr8uB2WgcA0cpXEVNrvGZ4FUqm6:JplrVbDdQaqdS/ofraFErH8uB2Wm0SXj
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Program Files\shipped\against.exe"C:\Program Files\shipped\against.exe" "33201"1⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
C:\Users\Admin\AppData\Local\Temp\2024-01-11_c732cea5c2a5c86009180dbdd368dd67_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-11_c732cea5c2a5c86009180dbdd368dd67_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
7KB
MD59db283aedec1527fd403a14830c3ea40
SHA1b1163c9df4b92a1c5157e6957d511e7643c9d4a9
SHA25623936b0f6ffa10763bc986407d710d620455bd5df4f2b2589849613ccdb60ff6
SHA5123a7b84595daeb962339950bf614cd21bbcbfedb371560e9f2feaf2c48eeee0a5a79a144fc80f99d629dfeb6ec09bc31adf8a23b7e296b9878444875bb50bbb8d