Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    18/01/2024, 23:15

General

  • Target

    2024-01-18_b376e207276b47bb4aff921ce8acd228_icedid.exe

  • Size

    1.6MB

  • MD5

    b376e207276b47bb4aff921ce8acd228

  • SHA1

    cfc1ee9c8e58cf02f6e5475add4d4190f7d0486c

  • SHA256

    2b4c0514841f0608e0ddcfd54f0077fce59151facd79b2d41855c2c07e69afaa

  • SHA512

    155779d901f5bdb8eac13904ea77cb56244c39c2c087e614ee5ee7522f07a40ff7ad83505addeccfd6fd96fd12a25b5fe34d1841570f42b955bde8faf860d202

  • SSDEEP

    49152:ac15/Zugax8R7IAMWtXMi8Nq3EuyLhhQlsXOezZ:ag5/ZuVx87tXUNq3LyLEG+eV

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-01-18_b376e207276b47bb4aff921ce8acd228_icedid.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-01-18_b376e207276b47bb4aff921ce8acd228_icedid.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1384

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\{921269F6-A2C1-422e-AFE1-B5AFD69A06CB}\config.xml

          Filesize

          314B

          MD5

          b441a73cd562d4f1478b1febaa02ba42

          SHA1

          729b3bd832eb9aa0ed358eb3ad796e989ffc3dc4

          SHA256

          ccbc4cc2949866b388dd8aed415322647384836c516c6946fa1e6c94b5d3e8b7

          SHA512

          6a4c0a0c01bb4b74ce2c09ee1e1829b2f90da467b21c5c25b362e5b0532ae72c9a7e009799fb28405a82cc034b67d748b4f958aaa13763a6057843d7b6437974

        • C:\Users\Admin\AppData\Local\Temp\{921269F6-A2C1-422e-AFE1-B5AFD69A06CB}\filelist.xml

          Filesize

          3KB

          MD5

          4861a56999c3018452bae6f9166f8982

          SHA1

          e31b240d4c29d9f681ac39063c6faf9c78457b2e

          SHA256

          7934ed7747b16b22a1f625db37e392a1c6e4081c4d941f37c12327c2062713e1

          SHA512

          cf3935edd6adbabd64f43aa9e72c59da65267c0e56fe6778fdd9811f7e6f6ee617fb5e9b31057dbbc2a1c63edcd5f6f982c2150427d47e7c723ba531278a6ed3