Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
28/01/2024, 15:28
General
-
Target
2024-01-28_94fd6c32ce01b7486f51f898f51ed17b_icedid.exe
-
Size
314KB
-
MD5
94fd6c32ce01b7486f51f898f51ed17b
-
SHA1
d51b5c04087a324c4e1b1f457302730fe62a4fcd
-
SHA256
25d0f9abf1866b1c9a240f42d4da301fadc508ef8e8411cd2fbff8c9a6b157c2
-
SHA512
e0743744894b7ccaf34ec5213fa5505c1faf7d4c57ea17ef4f5ac7ee6ed955b492e2a4d7ab223dd01be11adebb975d717410547ae4eee2a5a02aebfb510daf15
-
SSDEEP
3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-28_94fd6c32ce01b7486f51f898f51ed17b_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-28_94fd6c32ce01b7486f51f898f51ed17b_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\command\perating.exe"C:\Program Files\command\perating.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
314KB
MD56149c87182e92d7bccf030d55580da05
SHA151285a7164099e10fc1aa04389ba5d52ff6a9a45
SHA256a8abaf3e56bca4ad3081d06ea65c1f54ffdb76ac8cd03bf73d8b9df346554cfb
SHA512a7b4d6d540167e209d9a876fc48dadf0456b25ee809543894e9b8e17d4ba03cd8061c5c8e92b0f92bfb6c30852cbeba8dc5416c18ed82538f0e318a9b27e32a3