Analysis
-
max time kernel
90s -
max time network
122s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
28-01-2024 15:28
General
-
Target
2024-01-28_94fd6c32ce01b7486f51f898f51ed17b_icedid.exe
-
Size
314KB
-
MD5
94fd6c32ce01b7486f51f898f51ed17b
-
SHA1
d51b5c04087a324c4e1b1f457302730fe62a4fcd
-
SHA256
25d0f9abf1866b1c9a240f42d4da301fadc508ef8e8411cd2fbff8c9a6b157c2
-
SHA512
e0743744894b7ccaf34ec5213fa5505c1faf7d4c57ea17ef4f5ac7ee6ed955b492e2a4d7ab223dd01be11adebb975d717410547ae4eee2a5a02aebfb510daf15
-
SSDEEP
3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-28_94fd6c32ce01b7486f51f898f51ed17b_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-28_94fd6c32ce01b7486f51f898f51ed17b_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\command\perating.exe"C:\Program Files\command\perating.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
314KB
MD56149c87182e92d7bccf030d55580da05
SHA151285a7164099e10fc1aa04389ba5d52ff6a9a45
SHA256a8abaf3e56bca4ad3081d06ea65c1f54ffdb76ac8cd03bf73d8b9df346554cfb
SHA512a7b4d6d540167e209d9a876fc48dadf0456b25ee809543894e9b8e17d4ba03cd8061c5c8e92b0f92bfb6c30852cbeba8dc5416c18ed82538f0e318a9b27e32a3
-
Filesize
293KB
MD52d60f2ea3eb9dd9c9728dc79bdabc64f
SHA1708828cacc5b72e108be314a08067108368d920a
SHA2564c084b3e8c0f95206f1fed3659fbff2f3d6f87be170131fa9542fef9b29a4908
SHA5122c2644f0d213e276ad886b9f52ebc639de2e84cee1ab21e02e4929e5655b333b07a09d8fb3fd13eb9e948f45dc6f8fbabfc88d5f7d427ce84cacf27027811bd1