Analysis
-
max time kernel
88s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
03-02-2024 00:26
General
-
Target
2024-02-03_6c6bf333d85bd6a6fa578bee699e7b01_icedid.exe
-
Size
381KB
-
MD5
6c6bf333d85bd6a6fa578bee699e7b01
-
SHA1
40d662fde3a434f513e96f484c2ab1b02a25293c
-
SHA256
265fc583aef9735baf3dbc44e877e573e3f823727ee3577d52a2a6b21d817518
-
SHA512
d587b3086fd928b76f5f8a98e906215e40fb074f9da5c925ffeabb41ab12f9037828c2a43c3f641bf546c3eaefc83d91f71ab1f1cdb9110c52f42051296746d7
-
SSDEEP
6144:uplrlbbDdQaqd2X/96fr3KFEUGjr8uB2WgcA0cpXEVNrvGZ4FUqm6:uplrVbDdQaqdS/ofraFErH8uB2Wm0SXj
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-03_6c6bf333d85bd6a6fa578bee699e7b01_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-03_6c6bf333d85bd6a6fa578bee699e7b01_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\components\existing.exe"C:\Program Files\components\existing.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
381KB
MD50555f8dadeeac076cba0b148d9b4aca7
SHA1d37769ea0cd5fc5ff55a731ff381d5118a0ff78f
SHA256e89114d5a5373c87c033b41344d58b14f2fb93fa6ab503d725bde8ce76c91e2d
SHA512c042d7ad638f0eaef9938460172580243b4c38d8497aa784d3c8a67c2b68bb970d00f698927334a9b828b28899bfc203b58315afc64df9428c88c6863b25c95b