Analysis

  • max time kernel
    119s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29-01-2024 09:29

General

  • Target

    2024-01-29_4446cc2b05db7d6dc8607b92ac2b6a0f_icedid.exe

  • Size

    11.0MB

  • MD5

    4446cc2b05db7d6dc8607b92ac2b6a0f

  • SHA1

    8180919d9899925cf8cd86bb7345a1a24a66affe

  • SHA256

    e0dac5a10bfdc602a0cfff2c8b3cc1ec95bf46f6d9427b363a69cbfe390f1494

  • SHA512

    d3c224a6577c695ace5e4a9e992780459415e3ff5b8292cd9088bd12722ed086749b720d5299f08bb02ee2ec7c179e2dcbc9db5ae0a788ed3e66f10269a7f386

  • SSDEEP

    196608:4BI3nl15U1VScEGmkbsjdJLSpToQGBI539lmJ6CBVwQna7Q2PLdhs+UB8oGxF:CccEcsjdJLSpToQvlA6CVwUa7Q6BhWWb

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-01-29_4446cc2b05db7d6dc8607b92ac2b6a0f_icedid.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-01-29_4446cc2b05db7d6dc8607b92ac2b6a0f_icedid.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2912

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Templates\Zcom2941358\config.xml

    Filesize

    221B

    MD5

    f72fe4707f2f7385cabf0f0116d09e00

    SHA1

    b2c7d4c6075341a82d5f83e8b619151f34b9b4e5

    SHA256

    3c8b4c1af11ddeaf0ae34442bae4cb101dd6f130072840d4e1a96790ea99bca7

    SHA512

    2bae12d0c59b9446d7de022c82b7a8ed3b08b3f5bdd8c3b2714f136a175e02ace8dcb815bb95404e2477aa216c88086dcfe018d73df59042835461396ec0b50a

  • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Templates\Zcom2941358\filelist.xml

    Filesize

    1KB

    MD5

    204bfe0335f5b075808d0f5c289e0e63

    SHA1

    74a5ab858e3b4dc71e8ffcc4d8bec6d873d27ccb

    SHA256

    cbb2ec3ac6fa7b99f01d2777d8f3c3c3718801b4766f819de98f3c7c2d753da2

    SHA512

    a50ef9e1eca50b61baabd9d5abc72880e8a6365dd1d11adcf4aec6040d87e6896a1396ed504d401e2d403b2eae5737e935c94a3de25bb60ae69f4d47967fbc12