Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
29/01/2024, 17:29
General
-
Target
2024-01-29_9afbe87918bcfac56fe5b92c3bc84131_icedid.exe
-
Size
312KB
-
MD5
9afbe87918bcfac56fe5b92c3bc84131
-
SHA1
2c40e3dbd4757ce268ccb06f5c1ea75692fba5a6
-
SHA256
3d64c89b1b263230c9a1ae42ab382680761321a6161f9ca3bf93ec0681fc6825
-
SHA512
b21baa0f0c2648d1ab2e66907b515a53cd3b73f119aed669eb9a0189fc868f05572a71bec9a69473c2ad4c12d0574b5c794e14b2fbd032894b8a83fed7bbfe17
-
SSDEEP
3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-29_9afbe87918bcfac56fe5b92c3bc84131_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-29_9afbe87918bcfac56fe5b92c3bc84131_icedid.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Spanish\Swedish.exe"C:\Program Files\Spanish\Swedish.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
312KB
MD56e599d3e6552bc3f923b1b8c9e726dcf
SHA1c75a550f4197da2482777e201ed3130e06b4bef2
SHA256d590243ba1a0df09e907cbf49ae31f384e74dc233308f8659fe52f5c4f13cac6
SHA512cd3042f04b940e3e1d09952fb2081f34d4a6d2f22f7495fd9b352e7560dbd5773dbd1cc0aef630093ff5ff9604a01f7493063411071cb72a1efe6890aaaa22ca