Analysis
-
max time kernel
120s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
25-01-2024 17:49
General
-
Target
2024-01-25_4ca49334315fe176a279a8cce6380037_icedid.exe
-
Size
273KB
-
MD5
4ca49334315fe176a279a8cce6380037
-
SHA1
25e2092fca7a14578e9727745de2fbf159847d14
-
SHA256
187f8f1a23ebe9dea013080b49a9546fe8540ede6c3585e5799bf3a76725ea8b
-
SHA512
61df1760e629a6c661ba421aa350aaa517228c227de5f759101911ac60303b89959b3dfdb492a81ea1bdaf409de44c6e73c30cfcef6d708491db2a5d809607f7
-
SSDEEP
3072:lxUm75Fku3eKeO213SJReOqdmErj+HyHnNVIPL/+ybbiW1u46Q7qV3lU8xM:fU8Dk11CJ1qDWUNVIT/bblS9x
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-25_4ca49334315fe176a279a8cce6380037_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-25_4ca49334315fe176a279a8cce6380037_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\.exe"C:\Program Files\\.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
273KB
MD527621ca52aa209a53947bf8cf5f46b66
SHA1792dae398ee473fc40880ff77ac975a5c219955b
SHA2566dbe2b8b51660a8b03dadbdeb702ab423dedf241b36c3fc7b060b0670a9fbad5
SHA5128fb61f5182289bc46ec4e72e82ff881d94471670ea7412f81bf989d3dd7ce65cb7b7be7a061bc8905d0726f48e2a9b25ab7a2405912866ab87ab6965e6ddee9b