Analysis
-
max time kernel
136s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
27-01-2024 17:47
General
-
Target
2024-01-27_d4d9e87843ec1b13740662a2e0933f78_icedid.exe
-
Size
427KB
-
MD5
d4d9e87843ec1b13740662a2e0933f78
-
SHA1
be4b0f107aaa1f24fd02b1975756c4c38d52059c
-
SHA256
0affaa29f32bbbf4d61e5be3c0cdca53b33b2214ad291589a2ac681557c4168e
-
SHA512
9ceb85399511d249095035544eaa8588a31fbd5efed5727ed76e13ec931ad747eaff4bbd94a3e6e28aaedcf242d8b9014ddc812f64e2ce94de6c3fad4b60040b
-
SSDEEP
12288:IplrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:0xRQ+Fucuvm0as
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-27_d4d9e87843ec1b13740662a2e0933f78_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-27_d4d9e87843ec1b13740662a2e0933f78_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\findout\Diagnostic.exe"C:\Program Files\findout\Diagnostic.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
427KB
MD53627cba5c03746199c2f1be1b1996902
SHA1972c2a32fdf10e7135f5db4794c3d58879fdfe0a
SHA2561f016e5e1a6f503144ea6935fa0b5e9946e363f4e1d362b791f23e2d6c9d5aff
SHA5126ec617b2ffc35f3bf17fd7df2dbf332c02e0243c3640cb5819127387c126553acccdbcde076381dc672f737d594e69a0cbc178e0ce3824b3f213ebe084bf86b4