Analysis
-
max time kernel
145s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
03/02/2024, 05:32
General
-
Target
2024-02-03_6cc76cff68f04a08d620d169399a54c9_icedid.exe
-
Size
383KB
-
MD5
6cc76cff68f04a08d620d169399a54c9
-
SHA1
8c7c7c848b549fe50b49f7727b5fc6a62b41c654
-
SHA256
0302ee88e6e3f9e985373e86f02c9e6db8a1f428a0c66aa164c6c627aac631be
-
SHA512
f283bd918218f27e19d15a593d98f700d87500f4f5a3fa50ac4d4184ffeef4ec1dc4f0c23577c1ddad8df5ab6f56bc55b88fbb6b96e0547efe9caba7c09b12ca
-
SSDEEP
6144:6plrlbbDdQaqd2X/96fr3KFEUGjr8uB2WgcA0cpXEVNrvGZ4FUqm6:6plrVbDdQaqdS/ofraFErH8uB2Wm0SXj
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-03_6cc76cff68f04a08d620d169399a54c9_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-03_6cc76cff68f04a08d620d169399a54c9_icedid.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Composition\Performance.exe"C:\Program Files\Composition\Performance.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
102KB
MD58a5bd356d63ef84ad74ea9067d0f9f06
SHA1d9684b6d3f1ec346f2f6c7c946d3bd7942a7b53d
SHA256a1833065c1cb54da5c5116e45b9239870b468d15571eade9a11b0824658c31bb
SHA512a4ef367efcd179dfe15ec85c146af5da3c0f45c7779d46eb3c75877d9bd73587e0f0d31bd45868bed8a903f5b340461240a4f3a8ccd7f38a8f75e0b6cc6a74e2
-
Filesize
113KB
MD53f1ecf7610a38099cb088b13bc0d80e4
SHA10053ca25e05efd24eeb2b13db958c83329024bfc
SHA25627cd8a025857199f5f746eafbf89dff80cbffe3f1b9f3bc10c1460146ef32867
SHA5122f7efcbdd4bb5da43cda32d29b95b69db7c85081e4d2210520bed614f8a3dbafd13ac006565d4b98f786eaf48cdd562bf4f2768250b0bbb732f67fe802a3b150