Analysis
-
max time kernel
142s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
01-02-2024 22:03
General
-
Target
2024-02-01_c9f05f31d5a4675c7be0c61ceadd1879_icedid.exe
-
Size
315KB
-
MD5
c9f05f31d5a4675c7be0c61ceadd1879
-
SHA1
96cf56433a1a09d9dbc6b9e1bc4fcde034a1f7b0
-
SHA256
57fad370c0434a815b9adef6e839267c29a8457d8ebd2b1053bd12a40406dd18
-
SHA512
5bfae79e8b94d83acb24b73f3f76e9f0088224a6dbb86f03a0ffe86d55519bc0d4220b79c6db5740d9a0d0caf5c2b4fd73d8fce1c69012fe1ebd98515adf29d1
-
SSDEEP
3072:lxUm75Fku3eKeJk21ZSJReOqlz+mErj+HyHnNVIPL/+ybbiGF+1u46Q7q303lU8O:fU8DkpP1oJ1qlzUWUNVIT/bbbIW09R
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-01_c9f05f31d5a4675c7be0c61ceadd1879_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-01_c9f05f31d5a4675c7be0c61ceadd1879_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Extracted\obtained.exe"C:\Program Files\Extracted\obtained.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
315KB
MD5f4e9ab1832e3ce84746e569966db7ccc
SHA15f648f35a55ed47aa22a6fc37f9311a51ee3c793
SHA256911c3aca8f09985601ac5c52a8a1b3f4d2167614e7ea10d315d304ef20125d22
SHA512d9855c099ff214fc20e4268ee7692f7b499741b3e3d6ef6a80957ddeb5d91dca5a72ddbbac7356513a2ad7a8e9b3959106abfb310495e9ef00dc863ac3901179