Analysis
-
max time kernel
144s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
24/01/2024, 00:38
General
-
Target
2024-01-24_84e84372abf30bbc7e08c95d252f1c6e_icedid.exe
-
Size
313KB
-
MD5
84e84372abf30bbc7e08c95d252f1c6e
-
SHA1
ec2acbe8929a44bf0b45cef34ef00095fb7a28c8
-
SHA256
7a6a25b45195d91da754c227845748989c44475c1ffa36ca685610ffa5c0167f
-
SHA512
83c5f574dd8a7b60375638657dcb7c70bae0c70af286adf1a2fcba356486f32467d577a7186974c1f1c9f44446b9cee13fbc0b5b53c3837cbdf7c89b87b7d49d
-
SSDEEP
3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-24_84e84372abf30bbc7e08c95d252f1c6e_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-24_84e84372abf30bbc7e08c95d252f1c6e_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Autorun\compact.exe"C:\Program Files\Autorun\compact.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
313KB
MD50100b299393e00c30545e4fc5dd47f3c
SHA1d7cb864e7aa4d7ec79aaed8054571ec0485a2f49
SHA256931b6586b0ea903c02a1dbe12f9c7dc407106367b48c25e9070e25f7dcac1c59
SHA5128c9b383c22a08ddab175dae2c530d27292c7c51b31c8a78608de10c238b0199f42eeb5a666d6a46b6bdb67e2f4b6905bc836a50080a53f86b8b5db131bdcdbfb