Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
26-01-2024 20:29
General
-
Target
2024-01-26_54c85970ec4958a9533eaecc8d06b1c2_icedid.exe
-
Size
304KB
-
MD5
54c85970ec4958a9533eaecc8d06b1c2
-
SHA1
e0adeebff96f2beaf2bb1f9a9f937407bc06da0f
-
SHA256
f2dbfe169f8578c2509bff8e5c21c33613b6339b4a0b6ece1a68d4b8475a65ef
-
SHA512
742ceeeeaf5f06494a48a4fa4e425010cfafae1aec866325e8a8eebe500d2331ec1f8ba1b0799c8f6510bf2d72d2fd90797525a8c232b80cf6f7e2064262cc66
-
SSDEEP
3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-26_54c85970ec4958a9533eaecc8d06b1c2_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-26_54c85970ec4958a9533eaecc8d06b1c2_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Spanish\Swedish.exe"C:\Program Files\Spanish\Swedish.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
304KB
MD5a2173a37ad8497b1c8fc59b9cb4fe0f5
SHA19bfe7fef826370bf1ea898946700cdec4e927a40
SHA25620c2027cf7abe4f3a3540f41ed9a27235ea4e493369d8889e316e525fa0e8cdb
SHA51261095bb214b3fd3c40185d5b63345ce26d0840025dbafdce55bd9995299980eb7cde0006e118a14d1a2edcfba20561a9ef7577a434f3c93415e8a861730b408c