Analysis
-
max time kernel
122s -
max time network
133s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
18/01/2024, 22:52
General
-
Target
2024-01-18_68dc415d2318692843b491412e203421_icedid.exe
-
Size
311KB
-
MD5
68dc415d2318692843b491412e203421
-
SHA1
eeea5b3e077d581af384803bb503b8d964efdef8
-
SHA256
daaee0c6a388749d8d69e48e7a2fd7bee8c19908383bf028d6bd6c803b5d7275
-
SHA512
43f794274a10c4b884a96ca57dc699881b887616be216b63270f95549238bf5ba5ecbbb2725284ace162fbbe9a010120880c3a6693428eea8d09e7d166a377de
-
SSDEEP
3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-18_68dc415d2318692843b491412e203421_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-18_68dc415d2318692843b491412e203421_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Call\command.exe"C:\Program Files\Call\command.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
311KB
MD5df8e7ef52c33497ad927f029d9973435
SHA11f3365a5f2e3bbf01c6b5295127537dea3b6747d
SHA25607f406f53621ce909648fb0594b94f2b3949750880eea3128dfd550e0b8c9cad
SHA512d638190b12f96b38a26ff7cb910902e8002e02635b4e449b9622bda0a7fc7e46c87a5fec3b1323747c9545c552a0c213cdfe19e6704b8ba4c7c89eaa7635decd