Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
26-01-2024 00:26
General
-
Target
2024-01-26_32a2d2f20210597f038a1d6deea6829e_icedid.exe
-
Size
381KB
-
MD5
32a2d2f20210597f038a1d6deea6829e
-
SHA1
8889ad5829c6d63d3b191e6d5837440d62da4ee7
-
SHA256
7ff23d93bde4253090cf9d2d3452eaf713acb7fd1dac50e0404578862cfa06e5
-
SHA512
409de8d13a9c25c2bf8ea708818306ca0df475bf78490fff12b7cc19618e7f118d82ecc980c80ed5f24168559cd9ee281e8ea591522e0383377c8bb0198137d5
-
SSDEEP
6144:WplrlbbDdQaqd2X/96fr3KFEUGjr8uB2WgcA0cpXEVNrvGZ4FUqm6:WplrVbDdQaqdS/ofraFErH8uB2Wm0SXj
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-26_32a2d2f20210597f038a1d6deea6829e_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-26_32a2d2f20210597f038a1d6deea6829e_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Debugging\Internals.exe"C:\Program Files\Debugging\Internals.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
381KB
MD5f06389217c14fe990e67516e83e9076f
SHA1f76ce62d029f898d312004e4f259e9c7fe4ca104
SHA2567b4ae0b009bfcc2fed4540c49667ededdf752d0713291a4075f8eaeda4314423
SHA512d1d14664c2cc4d726f7762a842c80612acea86851ffefc1ce2e41781a49e3f6c407b58765efa23852bfadfb865350f15d371bc3536458f51f52248d2be88c8f3